3e36015682382a0bbf9390cef0279430_NEIKI | Triage

Sharing

General

Target

3e36015682382a0bbf9390cef0279430_NEIKI
Size

32KB
MD5

3e36015682382a0bbf9390cef0279430
SHA1

a18073004378b5ca35ef1e397eddacce3ef6ecc3
SHA256

086de1491c43946580a1f73f8c65c892adbc6e46f6a2f185d19640342de1f051
SHA512

35b1a48b8b0362721ac5293585b4a6bc77c47c723edc757a4f5ebd893011a3b9ed2dab1e40afdc18a3f745cf0145bb3053bd29f3282c96bea83d590cf4ddaf08
SSDEEP

768:1utAHqi2F+l2zLgSSJ7XC2rUdTNEtjF40PJ8nQk725Nkz8dkd6dQP3I:1YAHqi2Fzk7xXMjEtjF1WS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e36015682382a0bbf9390cef0279430_NEIKI

Files

3e36015682382a0bbf9390cef0279430_NEIKI
.exe windows:4 windows x86 arch:x86

c4e6a5ef68fb69e7ccaeb870566c0149

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CancelDC

winspool.drv

WaitForPrinterChange

msvbvm60

ord183
ord665
ord669
ord524
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord615
ord432

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ