b685b0fa4b070538375eebf3d102a020_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b685b0fa4b070538375eebf3d102a020_NeikiAnalytics
Size

68KB
MD5

b685b0fa4b070538375eebf3d102a020
SHA1

5297f2ebcac69d54714389a0427b198413c75545
SHA256

82cb2b8abc71a86e1d99971ccf87d0554b42d4a1f1e5df5a33a82d503b510db8
SHA512

5c27ee0da39976bc684309253cf9b3a0fbf542a1f34d77b27dad83484d8d4d546e91c4f2f1124968e1f5ea51421578d5687ebeeae14f9b5ed9fd27715cdc44c2
SSDEEP

1536:l5mUmJ/02mjUAsi9N5d0XCHPI59Ei2rR0Jr05:lRmJ0Uji9N5d0XV5Si2rR6E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b685b0fa4b070538375eebf3d102a020_NeikiAnalytics

Files

b685b0fa4b070538375eebf3d102a020_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

25e04add64d43b80b6d8ab7eb05a28e4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord698
ord593
ord598
ord631
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ProcCallEngine
ord570
ord648
ord578
ord100
ord617

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ