Static task
static1
Behavioral task
behavioral1
Sample
e550a52a8be04b0cb81c0606193c5060_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e550a52a8be04b0cb81c0606193c5060_NEIKI.exe
Resource
win10v2004-20240426-en
General
-
Target
e550a52a8be04b0cb81c0606193c5060_NEIKI
-
Size
380KB
-
MD5
e550a52a8be04b0cb81c0606193c5060
-
SHA1
5a14e33bae7b8a6d60f7db8da4f9b41cce9213c8
-
SHA256
617a5cd786a6fafb50705468333dc25400806bdee7f533486cdeeed3123952c7
-
SHA512
9f8ced918443889c47ca6241da2234e413c2f1c068b31e8ee3a9093dbfb394345a845dfc01a8da96c26dd8fe07878045808f059476a253be741d184d30ba5b21
-
SSDEEP
3072:B8RinudiP52xx67lLdqp1k+sIrPI3cePSf7PTKpn98KqKp0wIT:ukgiPA6RcVrQsePSfvKpn98VKp0wy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e550a52a8be04b0cb81c0606193c5060_NEIKI
Files
-
e550a52a8be04b0cb81c0606193c5060_NEIKI.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
LJxeAGtT Size: 6KB - Virtual size: 6KB
ZORDSvfD Size: 45KB - Virtual size: 44KB
njNQzCrQ Size: 11KB - Virtual size: 11KB
BVEGTlZz Size: 12KB - Virtual size: 11KB
jgayOBzN Size: 2KB - Virtual size: 1KB
AhBAhIaJ Size: 1024B - Virtual size: 956B
XuUzLcpC Size: 47KB - Virtual size: 47KB
ZspOMzKB Size: 1024B - Virtual size: 923B
eWqmcfhh Size: 3KB - Virtual size: 2KB
DtSxbYYe Size: 28KB - Virtual size: 27KB