c3c8bb73ca564edb098a0915ca7862e0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c3c8bb73ca564edb098a0915ca7862e0_NEIKI
Size

79KB
MD5

c3c8bb73ca564edb098a0915ca7862e0
SHA1

3ac8ee01e0ca5b0531d69e8daa98a6ba429849a5
SHA256

d8b28cd78f03896f2abad9d0bded0f4cda08883de1dbe50824a05de0661ec93e
SHA512

adef1d171e0fc039f5a36fe3d7de7167d499eda486b762acc35408846841b42ebdecb0ac75ceca310d43a2eda7cc35af9b194f7cb71fe17b85dc6dd15058b5a9
SSDEEP

768:MpQNwC3BESe4Vqth+0V5vKwQNwC3BE3bqNmCRh5EMS:keT7BVwxfv9eTAGv5zS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c3c8bb73ca564edb098a0915ca7862e0_NEIKI

Files

c3c8bb73ca564edb098a0915ca7862e0_NEIKI
.exe windows:4 windows x86 arch:x86

bfbf457d52153d2191e67bb6c9212334

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvbvm60

MethCallEngine
ord593
ord594
ord595
ord598
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord530
ord716
ProcCallEngine
ord537
ord645
ord570
ord685
ord100
ord616
ord542
ord545
ord546
ord547
ord580

Sections

.text
Size: 70KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE