24775b76438e964a8ed1029dc0b744e0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24775b76438e964a8ed1029dc0b744e0_NEIKI
Size

652KB
MD5

24775b76438e964a8ed1029dc0b744e0
SHA1

710705b880eebdfc4e37a977555075c5c6afde25
SHA256

94271e58a002d45df455e7d2c5c8fad488e09b43d201e61a46be1e81687f6c00
SHA512

838979f3510fdbc97dfd156122df13fcbd6d74224ce65c016542856d20f76da1b9fd87196540197164a516de46fbf6179917de5cc5b6adae40ae8f3f5ea7e7c4
SSDEEP

6144:709mbP3/0GHb5GRA3KLwGDZzrEbnJ8oE+TvdyCYOn4W:49acVzGpyCYrW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24775b76438e964a8ed1029dc0b744e0_NEIKI

Files

24775b76438e964a8ed1029dc0b744e0_NEIKI
.exe windows:4 windows x86 arch:x86

08a504a60cca859c50a485221e9c41d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord588
MethCallEngine
ord660
ord661
ord557
ord595
ord598
ord520
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
ord560
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord717
ord534
ProcCallEngine
ord535
ord645
ord648
ord576
ord578
ord685
ord100
ord616
ord650
ord546
ord581

Sections

.text
Size: 636KB - Virtual size: 634KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ