0e6920ae85959d1a6276101285045ec0_NeikiAnalytics | Triage

Sharing

General

Target

0e6920ae85959d1a6276101285045ec0_NeikiAnalytics
Size

82KB
MD5

0e6920ae85959d1a6276101285045ec0
SHA1

46a11a9e70a23b60a682514fa265c274ec82257a
SHA256

58a11fc0c778f15dcb56229b2489f8ce6c1af9862e2eaf6ed232a3047c0bacd6
SHA512

b5e814bf7cac6417e39913e8d536482051c5b3194e540e3c2e2bba822147b65a9f0d0659a5cd34985c863b463a1979c98c5a2b078e1cf7ce9902dd11cf49a7fc
SSDEEP

1536:hweU9lKc/HZVJ5xG4c4EwOaVv1nlC+Tk7bhGQhRRzab3/Ygn:VMlX/HHJbGnSpNRw7bhGEzyYg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e6920ae85959d1a6276101285045ec0_NeikiAnalytics

Files

0e6920ae85959d1a6276101285045ec0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

8f02cfab7b85b42e89e60b6952fc93ba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AreAllAccessesGranted

msvbvm60

ord183
ord557
ord669
ord704
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord680
ord100
ord432

Sections

.text
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ