Behavioral task
behavioral1
Sample
fbdfc9c914852326c20b3edc507ce100_NEIKI.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
fbdfc9c914852326c20b3edc507ce100_NEIKI.exe
Resource
win10v2004-20240426-en
General
-
Target
fbdfc9c914852326c20b3edc507ce100_NEIKI
-
Size
1.1MB
-
MD5
fbdfc9c914852326c20b3edc507ce100
-
SHA1
7f97e1850dcb6fc90e207e821a83891723b5e43d
-
SHA256
6a64660a37251f9c29b70638e0006e20d9ba0f8aaf17bfc8361f343472253071
-
SHA512
274f5171631aac086a76afeb84c87b00fc4bef06094f851933fa490c3fb34496f21179ba569ad8e952806f1ba5f1361da21df7776cf14e7c060db64739921a7d
-
SSDEEP
24576:VztxOqcN6M9SJaGFoalWtrJZlcu6nONUKy5jCFMuRiGnLNcXyx:nxOqt2SJaGFoXrXN6nONL0jM9Nce
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbdfc9c914852326c20b3edc507ce100_NEIKI
Files
-
fbdfc9c914852326c20b3edc507ce100_NEIKI.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_BIND
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kxvu Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.psfx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fpugn Size: 512B - Virtual size: 4KB