483a8bdec0eef8176e5444876f7f79d0_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

483a8bdec0eef8176e5444876f7f79d0_NeikiAnalytics
Size

36KB
MD5

483a8bdec0eef8176e5444876f7f79d0
SHA1

6ce570f089337e76a16e0877f518c51f981e6278
SHA256

21b804b4597628424be15ad5d3055f4192aa7e7bb7066d13cd1eaebf2227dc98
SHA512

9a98f53944ecb61f1ec232d5fcf1555661f5c14936dbd109a66f3027000f8fcdfbbf1ab757a09e3398610377efbc06f95ae100209464f6a688310e41df681818
SSDEEP

768:9pVPkID+UbD7N02XWMp/HdFCOuv5+jvA6fzfn2rmYIiG:jVPM+XDXWqlC5+jvd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
483a8bdec0eef8176e5444876f7f79d0_NeikiAnalytics

Files

483a8bdec0eef8176e5444876f7f79d0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

269eea84db2dabf35ee3cb42a420d47c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHBrowseForFolder

netshell

DllGetClassObject

oleaut32

SafeArrayGetVartype

msvbvm60

ord691
ord661
ord669
ord305
ord526
DllFunctionCall
__vbaExceptHandler
ProcCallEngine
ord644
ord570
ord100
ord614
ord542

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ