b3ddb5216a25f0c0a65cabd4f9efa240_NeikiAnalytics | Triage

Sharing

General

Target

b3ddb5216a25f0c0a65cabd4f9efa240_NeikiAnalytics
Size

1.7MB
MD5

b3ddb5216a25f0c0a65cabd4f9efa240
SHA1

fa769c12535068f39f3a28475501bc0792e7e023
SHA256

6b3f64c1b69c104a4098cba52973d44767d19fce51611f59cfd12877cf19ae2d
SHA512

05c7ac3ec4b73ff51caf9c77dc592fb505e71b4c327535a2c38d4170145eb2e5c6160493b7c6a677a3fb999fd612f7d4c893d7d891a37b9e60ff2be318c7bc1b
SSDEEP

12288:vzePADFjZ7EcrWDoDQNRkHM/abog7s/WqHRl3d9p03M3KOrmw:beP6jZ713DQNo/sms/nl3FgYKOr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3ddb5216a25f0c0a65cabd4f9efa240_NeikiAnalytics

Files

b3ddb5216a25f0c0a65cabd4f9efa240_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

94dfe926944e7a090a8ac5fe969a7e28

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord589
MethCallEngine
ord516
ord518
ord519
ord553
ord660
ord661
ord662
ord557
ord669
ord593
ord594
ord595
ord596
ord303
ord598
ord520
ord522
ord309
ord523
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
ord560
ord561
DllFunctionCall
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord714
ord607
ord608
ord531
ord532
ProcCallEngine
ord644
ord537
ord538
ord645
ord571
ord572
ord573
ord576
ord578
ord685
ord100
ord579
ord689
ord610
ord613
ord616
ord617
ord618
ord619
ord542
ord650
ord543
ord544
ord545
ord546
ord580
ord581

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ