Static task
static1
Behavioral task
behavioral1
Sample
10c4c09739245a76a5bff1665dd96380_NEIKI.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
10c4c09739245a76a5bff1665dd96380_NEIKI.exe
Resource
win10v2004-20240508-en
General
-
Target
10c4c09739245a76a5bff1665dd96380_NEIKI
-
Size
75KB
-
MD5
10c4c09739245a76a5bff1665dd96380
-
SHA1
5d719ef502dbcbf60cd255672ea895ad2523f822
-
SHA256
15fb57c71f00b2e151329d01af48b17479646f56743b1497d34759b116caaa18
-
SHA512
67d9ee65c843abde487958889bd6be6b725d8f130b953316becfa9c210c4f7bccd23cf9d6f6ef9c527cd46814fcf37e3db84ddd5b08d955a201b02e6b5267217
-
SSDEEP
1536:9x1Qja7luy6y0s4sqfkbnAKBOKofHfHTXQLzgvnzHPowYbvrjD/L7QPbg/Dr0T3s:3OjWuyt0ZsqsXOKofHfHTXQLzgvnzHPE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10c4c09739245a76a5bff1665dd96380_NEIKI
Files
-
10c4c09739245a76a5bff1665dd96380_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
5z5lxvng Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
580jogds Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
59k6dbvs Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE