Static task
static1
Behavioral task
behavioral1
Sample
ce586d86c99429d607f7e43c0f1a68f0_NEIKI.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ce586d86c99429d607f7e43c0f1a68f0_NEIKI.exe
Resource
win10v2004-20240508-en
General
-
Target
ce586d86c99429d607f7e43c0f1a68f0_NEIKI
-
Size
119KB
-
MD5
ce586d86c99429d607f7e43c0f1a68f0
-
SHA1
6bc4e13aa1e22ba1b417faa3d99a48b9a67d0664
-
SHA256
70b344f64bfc290e21c4e93a93e45140a4dd625206e28f1a92a1393228edbd1a
-
SHA512
4269350f28d2c6c1abd8ef8f3f361c7cc6fe7435faaaec90096264adf8b002ed2deb608c7f3774b1f7e3952120a4d7d9a99d7eaeb93afbf841853d8a339d96d5
-
SSDEEP
3072:4FHCJuCTH4TArK2ms7yZRTvJeM3mEwz4+X:yHAuW0Hs7UR7WEwT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce586d86c99429d607f7e43c0f1a68f0_NEIKI
Files
-
ce586d86c99429d607f7e43c0f1a68f0_NEIKI.exe windows:4 windows x86 arch:x86
6500538b598e8891fbbdc47141ea93e3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReplaceFile
BasepFreeActivationContextActivationBlock
SetLocaleInfoA
CreateThreadpoolWork
CheckElevationEnabled
Thread32First
GetConsoleAliasesA
GetLargePageMinimum
SetFirmwareEnvironmentVariableExA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 105KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE