Static task
static1
Behavioral task
behavioral1
Sample
f24cbc1676c3991363b0f23b1f6e6ab0_NEIKI.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
f24cbc1676c3991363b0f23b1f6e6ab0_NEIKI.exe
Resource
win10v2004-20240426-en
General
-
Target
f24cbc1676c3991363b0f23b1f6e6ab0_NEIKI
-
Size
760KB
-
MD5
f24cbc1676c3991363b0f23b1f6e6ab0
-
SHA1
dec9b03dd9e655ce1b360818456921f789b07254
-
SHA256
c3d63aa841a77d6ce09727a365e11e3967fb7436c5e790d96f0cf1ae33a62914
-
SHA512
1610c5439992b324069877ea5b422cbbcd3a409f28a24718e2a14a9fb6b2a5fa5ecc5230b9af226867b753a459ee0fbdfa8cae46221a2f7bb722b488feb25e00
-
SSDEEP
12288:8rviP1pIPj92aSOcKrlr/fiNtfpIPj92aSOc:gywh2ahtPh2ah
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f24cbc1676c3991363b0f23b1f6e6ab0_NEIKI
Files
-
f24cbc1676c3991363b0f23b1f6e6ab0_NEIKI.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
OeZGWeDm Size: 4KB - Virtual size: 4KB
fkJVOvQR Size: 20KB - Virtual size: 20KB
FoMsSrJp Size: 12KB - Virtual size: 12KB
kwIquPxo Size: 8KB - Virtual size: 8KB
WwonZDDs Size: 4KB - Virtual size: 4KB
IPNZhRfj Size: 4KB - Virtual size: 4KB
VVcMTXyl Size: 4KB - Virtual size: 4KB
VdtUhcgk Size: 4KB - Virtual size: 4KB
yyHNWLZN Size: 80KB - Virtual size: 80KB
AoFYdlJS Size: 412KB - Virtual size: 412KB