Behavioral task
behavioral1
Sample
dda1fd9c85a446116c1b97ba5c3d4bc0_NEIKI.exe
Resource
win7-20240220-en
General
-
Target
dda1fd9c85a446116c1b97ba5c3d4bc0_NEIKI
-
Size
398KB
-
MD5
dda1fd9c85a446116c1b97ba5c3d4bc0
-
SHA1
4d07bb700230ca2556007f2fe617c031b6ec2f26
-
SHA256
eba67a09733b338fa2b4c36414ca9a7fc5250225d36b407717a2c5f44b2997e9
-
SHA512
ce46f7b9661ef55d11b5d525d75bcce1fba4e4a92d0ede5b393734061834e9c3b89da4c77d39511c714eaf7e6db4401393195ae728d70304b7ec3a841e9c86a7
-
SSDEEP
6144:kcm4FmowdHoSph3Ymu8wdHoSM05d34iWRbzamZ:y4wFHoS3zuxHoSTd34iWRhZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dda1fd9c85a446116c1b97ba5c3d4bc0_NEIKI
Files
-
dda1fd9c85a446116c1b97ba5c3d4bc0_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE