Static task
static1
Behavioral task
behavioral1
Sample
c1d487911abcc001eea1cd9c2cd6a113_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c1d487911abcc001eea1cd9c2cd6a113_NEIKI.exe
Resource
win10v2004-20240226-en
General
-
Target
c1d487911abcc001eea1cd9c2cd6a113_NEIKI
-
Size
64KB
-
MD5
c1d487911abcc001eea1cd9c2cd6a113
-
SHA1
e49bdad52d061381ba106a8939df30986d923354
-
SHA256
16f2c1fdce61fb0003d29eed13c18de1b2be30cebd6cb47288c87ecc82983cd8
-
SHA512
2e2c89613f658101011dc11c1d85bbd3290fe75ba8e6db1ab7f29da05c8b6f5e6f6e54498579ee952f4fc84cc902177bf1c1ee29f0fc31d5be8a36a789082aba
-
SSDEEP
1536:jUFD9VjB3Yh9Eo41/dL7WOC2XeAK2LWqXdZgQe:jUXVVIhmtvC+hXds
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1d487911abcc001eea1cd9c2cd6a113_NEIKI
Files
-
c1d487911abcc001eea1cd9c2cd6a113_NEIKI.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kofbl Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ