e8e70c86f35be6748be462c699760000_NEIKI | Triage

Sharing

General

Target

e8e70c86f35be6748be462c699760000_NEIKI
Size

32KB
MD5

e8e70c86f35be6748be462c699760000
SHA1

e189fd27ee8f486c7e4fd5be7f6fa52ac91c0ee5
SHA256

61440aa094f11e22d13674793f4c47a2bd4e0b7a936054270b955b176a1f172d
SHA512

4d30b47d4415ad79cfdb0c3727ddb0463af3f912f92d563941cba5905e02fc859a5b038ff04800ffc40ac7c5a7ef509158f88ae7c448def9f4756590cf429b63
SSDEEP

768:PYzsIdmoIBW+p1FWuiANtg9bPHhHXPNWNCB+Gc1H8zHvc:PEsIdmoIBW+/FNtg9zxB+52Dvc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e8e70c86f35be6748be462c699760000_NEIKI

Files

e8e70c86f35be6748be462c699760000_NEIKI
.exe windows:4 windows x86 arch:x86

30a790d2d477ee1d1a862af3d2a69480

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvbvm60

MethCallEngine
ord517
ord518
ord593
ord594
ord598
ord520
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord573
ord685
ord100
ord616
ord618
ord619
ord546
ord547
ord580

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ