Static task
static1
Behavioral task
behavioral1
Sample
eebd6ad35ff90432ac13899bcefb6060_NEIKI.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
eebd6ad35ff90432ac13899bcefb6060_NEIKI.exe
Resource
win10v2004-20240508-en
General
-
Target
eebd6ad35ff90432ac13899bcefb6060_NEIKI
-
Size
8.6MB
-
MD5
eebd6ad35ff90432ac13899bcefb6060
-
SHA1
b6ba8ee90c03efb696d31eca45b3696136e5a62a
-
SHA256
de22a3ae2bef264b35dac58571e6e22d1f4dd2d3dac3935d3767dae248505bea
-
SHA512
431277411ad4f7edab3e8a4695fd3bd044382d5c4f9c409b1c129392480549b321378b07c6a061c45247379ec09684f2f3858c550c496da086567e94b86a09a2
-
SSDEEP
196608:5S9D4iiWI9W8LyJFdJ2/mjCZTZLIFbHzCoPpWxtbY4/V:g9kVU8LG2eUTt4Wo4T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eebd6ad35ff90432ac13899bcefb6060_NEIKI
Files
-
eebd6ad35ff90432ac13899bcefb6060_NEIKI.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 605KB - Virtual size: 604KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ