e2f3ef7de59c36244ad5f6cef9c0ba60_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e2f3ef7de59c36244ad5f6cef9c0ba60_NEIKI
Size

9KB
MD5

e2f3ef7de59c36244ad5f6cef9c0ba60
SHA1

d11c3d8db73a07d37d8b317e9576706208b386a3
SHA256

b5524bcf6e4bc65f8ab2c17cd1efceb7726db892a993a101cbebc3072d240545
SHA512

eea29ea423cdd6019eb45df0603c4965d913eb0ef0fb6ca9d526d72d3baab6c6a218ab923112d164a9eb9cc504c57f7919979b9b11d60e3e7ab8266c42c58f2a
SSDEEP

96:XBQADz1TFNH1A7aALKtrwwV6KFB1cEJG6c2rvW:WAn11FNwwV93cCv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e2f3ef7de59c36244ad5f6cef9c0ba60_NEIKI

Files

e2f3ef7de59c36244ad5f6cef9c0ba60_NEIKI
.exe windows:4 windows x86 arch:x86

6a34e0c278265eba4c26f2a1d69b47f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm50

MethCallEngine
ord625
ord660
ord598
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord537
ord100

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 388B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ