Behavioral task
behavioral1
Sample
020d355ff3b705dc03aa84d00c7241f0_NEIKI.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
020d355ff3b705dc03aa84d00c7241f0_NEIKI.exe
Resource
win10v2004-20240508-en
General
-
Target
020d355ff3b705dc03aa84d00c7241f0_NEIKI
-
Size
1.4MB
-
MD5
020d355ff3b705dc03aa84d00c7241f0
-
SHA1
a775284eefabd4834af33903e1214624d63fffee
-
SHA256
89ccfeec99f0fdc283a00ef19ffb31a6c0e67ed56787fd76a96d5210654845f5
-
SHA512
ad94b72e945c6f4180552727801efb9f0b8d04700c85c41c0e66f186790b7ecaa2c637fc84be34b5e3a11896d480a7dced511d93a1d07b8b5070e2b7be7b8cd1
-
SSDEEP
24576:xnGKp7VMsM58voV6VAXe3N7SfzjmpVytojwR0zL1ckma56z3rxuaf0/AfDVc:FjZoCRSffOgtoUR0zLnmpnD0/IDy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 020d355ff3b705dc03aa84d00c7241f0_NEIKI
Files
-
020d355ff3b705dc03aa84d00c7241f0_NEIKI.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qhx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sy Size: 512B - Virtual size: 4KB