8fceb2125c3a3279c5b65c546aafe7b0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8fceb2125c3a3279c5b65c546aafe7b0_NEIKI
Size

404KB
MD5

8fceb2125c3a3279c5b65c546aafe7b0
SHA1

2ce4ef7b162c4ccab406bfa5ce2c28d005a68fe3
SHA256

da8e03476c63e1b4125f4878636c0cb643047952783852e2df90c5281c853c24
SHA512

a3d76ecfb2668fd5b2c4e00c82bc795e3166b68844d6283b1d6790499167f336192a1eecf5718a472fb944492b88a213debf9c1fc551f5b714f5cfa476c7a736
SSDEEP

6144:xXIrgAm8E1PwityfpZfwoThQr6LeCA9WpashJhTBc:x4r2URZfwoThQuzfTc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8fceb2125c3a3279c5b65c546aafe7b0_NEIKI

Files

8fceb2125c3a3279c5b65c546aafe7b0_NEIKI
.exe windows:4 windows x86 arch:x86

81fd08ff61a0a8e7a4e824fe2b0575a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord691
ord692
MethCallEngine
ord517
ord518
ord660
ord666
ord593
ord595
ord596
ord598
ord632
ord526
EVENT_SINK_AddRef
ord528
ord560
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord716
ord531
ProcCallEngine
ord537
ord681
ord576
ord577
ord578
ord100
ord579
ord689
ord616
ord617
ord618
ord619
ord581

Sections

.text
Size: 388KB - Virtual size: 387KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ