Static task
static1
Behavioral task
behavioral1
Sample
e1b78adea74b5f29aa2d1e0388447f00_NEIKI.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e1b78adea74b5f29aa2d1e0388447f00_NEIKI.exe
Resource
win10v2004-20240226-en
General
-
Target
e1b78adea74b5f29aa2d1e0388447f00_NEIKI
-
Size
392KB
-
MD5
e1b78adea74b5f29aa2d1e0388447f00
-
SHA1
456a47357f5fd2689065c488fc7568be844dc22f
-
SHA256
ed067de0ba041e6bc3f970b889fd0fd5fb5fb55f648d66ff976f12e82d82c462
-
SHA512
4ef4158499f9d123dafa218346deac49b032e13e40917fb77d93230803dab89c4fda8477d9b236009c5a0309b10c813c9121eb34770e432551d18d494f703817
-
SSDEEP
6144:3vEmWPDNND9yRPzLq+YXFqaZiMLic9kzVd7EAC4TSs9Ei4rJW:8mWhND9yJz+b1FcMLmp2ATTSsdx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1b78adea74b5f29aa2d1e0388447f00_NEIKI
Files
-
e1b78adea74b5f29aa2d1e0388447f00_NEIKI.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 334KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ