Static task
static1
Behavioral task
behavioral1
Sample
dae88c6b97f08f0364271146130fe590_NEIKI.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
dae88c6b97f08f0364271146130fe590_NEIKI.dll
Resource
win10v2004-20240508-en
General
-
Target
dae88c6b97f08f0364271146130fe590_NEIKI
-
Size
64KB
-
MD5
dae88c6b97f08f0364271146130fe590
-
SHA1
d4cc76e38d3fc5ed9930cddcc200cb5b272f91af
-
SHA256
fa9119aad2faa5261bbc450486e12529f82ae0326cfde5b4c981e0bdf7f2cd10
-
SHA512
93d94d2e188184c4946b4a6de1a49e6f39467a0925ab81061ab016ecd9ae96f0863705769066459294f42f70cc3750f394e452423187f5514e341c55baccf212
-
SSDEEP
768:ahjP7CjKoqI+plLMT8tkN7b+v7rW30gnlAv6Um8okEbQNcwq:ahjP7CjKowLMT8tu7btlx0oRjwq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dae88c6b97f08f0364271146130fe590_NEIKI
Files
-
dae88c6b97f08f0364271146130fe590_NEIKI.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 18KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE