Behavioral task
behavioral1
Sample
fd041b49af058c4bb2c597c07f8ec110_NEIKI.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
fd041b49af058c4bb2c597c07f8ec110_NEIKI.exe
Resource
win10v2004-20240508-en
General
-
Target
fd041b49af058c4bb2c597c07f8ec110_NEIKI
-
Size
738KB
-
MD5
fd041b49af058c4bb2c597c07f8ec110
-
SHA1
e2b23b0b2b5324b7352973216944e9395258e237
-
SHA256
f64dec957e95f6aa734d2bf7049f93fdc7b2a9856e0f23c06c1dc957440ffa30
-
SHA512
b1fb3f1f7f76eb9a5e4db83f37bd5d49d157a85dbf035396c0abeb30f97c8d19d2203c811728a679056f051f6c339a0422aed11fcdf67e8ce7af08c9109ff207
-
SSDEEP
12288:tOQ298xMuhSmuWaL2PJ9PV0nDifhexY47ik0qp+7:Z298LSmuWaahe7Y47iII
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd041b49af058c4bb2c597c07f8ec110_NEIKI
Files
-
fd041b49af058c4bb2c597c07f8ec110_NEIKI.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 589KB - Virtual size: 592KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE