Static task
static1
Behavioral task
behavioral1
Sample
fa4c7d198aa6770ff2323a02a13b4340_NEIKI.exe
Resource
win7-20240221-en
General
-
Target
fa4c7d198aa6770ff2323a02a13b4340_NEIKI
-
Size
126KB
-
MD5
fa4c7d198aa6770ff2323a02a13b4340
-
SHA1
3b69bd4643aacadfecf4135f2149e4a869c8a970
-
SHA256
32495e54bbc34d1f8128a42211c6d4445fcda860ca997b1b1c4b4e7aa49d4007
-
SHA512
35cb5592f0ccca203d0fff76003a02d787afeef3326262c20faae643c80379d3ca1f0ea9a5616427c3886df7b26e028254efd56b1161a6fd56af1b98895200e6
-
SSDEEP
3072:ymb3NkkiQ3mdBjFWXkj7afoHVpx+dGoHvZG:n3C9BRW0j/1px+dGkvc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa4c7d198aa6770ff2323a02a13b4340_NEIKI
Files
-
fa4c7d198aa6770ff2323a02a13b4340_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 47KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
petite Size: 274B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ