3fca61fae8e78f1acc8c0d531bea6710_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3fca61fae8e78f1acc8c0d531bea6710_NEIKI
Size

60KB
MD5

3fca61fae8e78f1acc8c0d531bea6710
SHA1

d974301130623d0e9b76698debe04fd4dcda2a8f
SHA256

ec54370389e3ae8ad3cb2ad35fa12c14ffff3885cbc33e0b8145c5353c48a37b
SHA512

c5e61ba57799df587ff480b1624bd2d0d44af7aa0f06ecd3fad9302bd10c9304ee67518b5fe2e213fb1857f52c572a8ce5799eee8dc1ee23e14f7c7f46d63977
SSDEEP

768:FT6NvpSuEeYGgjpSgTtjNMykbO2U5+cjneFv1N6iaKIXG6nFeT:FT6vM8g1S4jNMyQO2U5+cjcKi2peT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fca61fae8e78f1acc8c0d531bea6710_NEIKI

Files

3fca61fae8e78f1acc8c0d531bea6710_NEIKI
.exe windows:4 windows x86 arch:x86

8a6e6e87cdd14ca5a5fccd0bc87fa0f0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaVarTstGt
_CIcos
_adj_fptan
__vbaFreeVar
ord588
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
ord608
__vbaFPException
__vbaInStrVar
__vbaVarCat
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ