c5eff680bd540336da241f20725823f0_NEIKI

General

Target
c5eff680bd540336da241f20725823f0_NEIKI
Size 128KB
Sample240508-qsbh3ahc95
SHA256 be3186d4058caaf253499d001de30059b1ae98136405ac6fd41c985ca396769f
MD5 c5eff680bd540336da241f20725823f0
SHA1 f6404355d4fe42b00640b0e7c67fb247004e5a85
SHA512 df5c73622dd43f6cd9ba1c2d3ad3748ca82b078bacca996ccf2c5a0016e9f8be74435ff70947327012594f916615dc4d4c43457bb2f9b43f427771150d42ca66
SSDEEP 3072:VvgwhTm5amkqIJS20hD7Me+QpWT21/Blx77x19:jmhUKWyJBlx77/9
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c5eff680bd540336da241f20725823f0_NEIKI

File Explorer

c5eff680bd540336da241f20725823f0_NEIKI

.exe 128KB

c5eff680bd540336da241f20725823f0_NEIKI

IMPHASH aecd90465f4a4fe7d70f2642938c82d8
SHA256 be3186d4058caaf253499d001de30059b1ae98136405ac6fd41c985ca396769f
MD5 c5eff680bd540336da241f20725823f0
SHA1 f6404355d4fe42b00640b0e7c67fb247004e5a85
SHA512 df5c73622dd43f6cd9ba1c2d3ad3748ca82b078bacca996ccf2c5a0016e9f8be74435ff70947327012594f916615dc4d4c43457bb2f9b43f427771150d42ca66
SSDEEP 3072:VvgwhTm5amkqIJS20hD7Me+QpWT21/Blx77x19:jmhUKWyJBlx77/9
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5756

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub _CIcos _adj_fptan __vbaHresultCheck __vbaVarMove ord585 __vbaVarVargNofree __vbaCyMul __vbaFreeVar __vbaFreeVarList _adj_fdiv_m64 _adj_fprem1 ord628 __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj ord556 __vbaLenVar _adj_fdiv_m32 __vbaAryDestruct ord594 __vbaCyAdd ord700 _adj_fdiv_m16i _adj_fdivr_m16i _CIsin __vbaChkstk __vbaI2Cy __vbaCyVar EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaCyI2 __vbaAryConstruct2 __vbaR4Str __vbaCyI4 DllFunctionCall __vbaCySub __vbaFpUI1 ord564 ord672 __vbaRedimPreserve _adj_fpatan __vbaRedim EVENT_SINK_Release __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaUI1I4 __vbaVarMul __vbaExceptHandler __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaFPException __vbaStrVarVal ord537 _CIlog __vbaErrorOverflow __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 __vbaR8Var _adj_fdiv_r ord100 __vbaI4Var __vbaVarAdd __vbaAryLock __vbaStrToAnsi __vbaVarDup __vbaFpI2 __vbaFpI4 _CIatan __vbaStrMove __vbaI4Cy __vbaStrVarCopy _allmul _CItan __vbaUI1Var __vbaAryUnlock _CIexp ord580 __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

c5eff680bd540336da241f20725823f0_NEIKI

msvbvm60

generic