Static task
static1
Behavioral task
behavioral1
Sample
561447d0dd6ef4115b64ce30a8bd51c0_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
561447d0dd6ef4115b64ce30a8bd51c0_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
561447d0dd6ef4115b64ce30a8bd51c0_NEIKI
-
Size
172KB
-
MD5
561447d0dd6ef4115b64ce30a8bd51c0
-
SHA1
35f886590fd9108bb4564b199fb175e3fb036446
-
SHA256
7a7f47775cf872fe20ba3e73c5e03329fdfbdcec4b1eb5a3fb38d711e1bc7e70
-
SHA512
07dc61f98343d9e801545190e3b8976ff7195655d87bfdc1221f33945a2dbc9a5fa286112d050ffcf422095c4e712fadfc5796194e172aca9c5f97c212745c56
-
SSDEEP
3072:jHx0J+a0UnnWTj2XAwqr6HFjuoF+N7bZD16iYIQusGGTkLGFMMalHSXvhSkXWnUO:jHNa0Unnij2Qh69uoF+N7bZD16iYIQuN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 561447d0dd6ef4115b64ce30a8bd51c0_NEIKI
Files
-
561447d0dd6ef4115b64ce30a8bd51c0_NEIKI.exe windows:4 windows x86 arch:x86
c21ba6b068b6956eac71bb95aa48de18
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord690
ord691
ord187
MethCallEngine
ord516
ord517
ord518
ord519
ord664
ord595
ord704
ord520
ord709
ord631
ord632
EVENT_SINK_AddRef
ord527
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord681
ord578
ord100
ord579
ord689
ord616
ord617
ord618
ord619
Sections
.text Size: 140KB - Virtual size: 138KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ