1272862f5f82b241477e95117f3b3420_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1272862f5f82b241477e95117f3b3420_NEIKI
Size

1.6MB
MD5

1272862f5f82b241477e95117f3b3420
SHA1

0eac2f0be3c42a95dd977b5ccc6273de7ac33761
SHA256

115e122697a10df169985736d2b38ceff387a080990a218ec3998e5d7292f6a4
SHA512

0c5c9f85ca67ea1c57531484ca5cad3f7c99aad90f38e6227a4dc779377dcaa8ac9b08626580c004ca6999a0b08b5cfc146cb5957f26ff4e96f13d3f129d0617
SSDEEP

12288:y4ir5gZ2c1Lkg7c35eeHLoN4qNYtUyrJFfOlognWPBdD4QOubg4xk:yRlgogzabgnWH4QOubg4q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1272862f5f82b241477e95117f3b3420_NEIKI

Files

1272862f5f82b241477e95117f3b3420_NEIKI
.exe windows:4 windows x86 arch:x86

8aa60aa6203d8c65e7ca5f9b0236345d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord589
MethCallEngine
ord516
ord518
ord626
ord552
ord553
ord660
ord661
ord557
ord558
ord665
ord300
ord595
ord302
ord596
ord303
ord702
ord703
ord598
ord306
ord705
ord520
ord308
ord309
ord631
ord632
EVENT_SINK_AddRef
ord527
ord528
ord529
ord560
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord714
ord607
ord608
ord716
ord319
ProcCallEngine
ord538
ord648
ord571
ord681
ord685
ord100
ord610
ord320
ord321
ord613
ord616
ord617
ord540
ord618
ord619
ord542
ord545
ord546
ord581

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ