2b6589a26e4ff9369b6857b49223c610_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b6589a26e4ff9369b6857b49223c610_NeikiAnalytics
Size

36KB
MD5

2b6589a26e4ff9369b6857b49223c610
SHA1

fe639f82d6a216730c5407d79670fe3f4f4051fa
SHA256

2889328cd874268c6bc96cb236c866ba54433da8eb20c12d88e2eafb6018716d
SHA512

88ca22ccb3afee855872305bcb3d908ec1205039664acb8d21ef3762162a412644095fe8a88ca2a6d9e8cdfb878c72178669becff7a37df4d862bbe7918899ce
SSDEEP

768:9zYhkID+UbDCOl/0asjWreyzICAVzYc9A6fzfn2rmYIi+:dYhM++Ol/0aJrVzICAmc9F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b6589a26e4ff9369b6857b49223c610_NeikiAnalytics

Files

2b6589a26e4ff9369b6857b49223c610_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

269eea84db2dabf35ee3cb42a420d47c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHBrowseForFolder

netshell

DllGetClassObject

oleaut32

SafeArrayGetVartype

msvbvm60

ord691
ord661
ord669
ord305
ord526
DllFunctionCall
__vbaExceptHandler
ProcCallEngine
ord644
ord570
ord100
ord614
ord542

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ