Static task
static1
Behavioral task
behavioral1
Sample
f8555e7a2f7b21002895410dc0b36f10_NEIKI.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
f8555e7a2f7b21002895410dc0b36f10_NEIKI.exe
Resource
win10v2004-20240426-en
General
-
Target
f8555e7a2f7b21002895410dc0b36f10_NEIKI
-
Size
605KB
-
MD5
f8555e7a2f7b21002895410dc0b36f10
-
SHA1
dbcba21afdc1dd9ee0e03790a342681f52006a76
-
SHA256
73f911fb5e9b057b4b2e4ca4206b588dd4ed48e3ea1c5de9607875c36f9e0680
-
SHA512
e1970be7cde77bbe4ff79b5183dc82235d9ca9dc64ddb85b26e72887f15094238f448d0da87703dd39787d77313dabab8eae409cab73bd39ae8cdf6a770fa8e0
-
SSDEEP
12288:zJMxy+7SFOHd5rJyV4qIvBVpcl+GOb82vkN0f1NNFM4g+/wR4lD:z2wTidpo3IpuOQ+g4NjD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f8555e7a2f7b21002895410dc0b36f10_NEIKI
Files
-
f8555e7a2f7b21002895410dc0b36f10_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ