20a50a48df61b553ceaa208299148740_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20a50a48df61b553ceaa208299148740_NEIKI
Size

20KB
MD5

20a50a48df61b553ceaa208299148740
SHA1

4e1588212b7e2bdc203d546f6ac4280629dc4f02
SHA256

78f97670cf4f8be7d6145895b2133c05a6df1e093621461f726ba527e25de1af
SHA512

800e7cd4d60151fd08cce553da7d09f3b81ec01c5053ebabe1ac9f0fcd05982af2d9d212ccc9d310c6ee2b7974386292c9549e89cf3023c99fb27f61b183bdbd
SSDEEP

96:/lxscNWANwgdhBkQyS6OY5kaBdnWCT7Ow:/TtsY5qoYZWK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20a50a48df61b553ceaa208299148740_NEIKI

Files

20a50a48df61b553ceaa208299148740_NEIKI
.exe windows:4 windows x86 arch:x86

54e0079691529009a3561bd00e922670

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
_adj_fdiv_m64
_adj_fprem1
__vbaHresultCheckObj
_adj_fdiv_m32
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
_adj_fpatan
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarDup
_CIatan
_allmul
_CItan
_CIexp
__vbaFreeObj

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ