31caaf704ee33d1de08069be11c73100_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31caaf704ee33d1de08069be11c73100_NEIKI
Size

249KB
MD5

31caaf704ee33d1de08069be11c73100
SHA1

b2b1eb84a539633cf2f5cb31b7097491d669e5d3
SHA256

a2fd3770b425aafa21c5a0080fcc04b805fd2466ccc529b71836d1d4721f4ae9
SHA512

def52cfefd934f84e5738c91e79a6216fe34080e200482b15ccbeae8bdb0a816d65ed56a46818caf561b2f3b21ec8b5581232f63a54e9bf7d981d0bf88d6e863
SSDEEP

3072:sr+Fu2II+HiXMcI/AKJEGCK4Kr1kNM+BxWy2bDZRJdZckwoQ5RT1l9KPdo:/MHD3/AKC1j//SZh1wNedo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31caaf704ee33d1de08069be11c73100_NEIKI

Files

31caaf704ee33d1de08069be11c73100_NEIKI
.exe windows:4 windows x86 arch:x86

b1332fc8454ed69bea840c0dc3a3695f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord660
ord666
ord598
ord709
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord607
ord608
ord531
ord645
ord570
ord576
ord100
ord617
ord619
ord546
ord580

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ