813f1115d4411aabebec2ec8c365e570_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

813f1115d4411aabebec2ec8c365e570_NeikiAnalytics
Size

36KB
MD5

813f1115d4411aabebec2ec8c365e570
SHA1

8c8d88610795fb63604887363eae8b41a7e1dcb7
SHA256

4a5e54155020e5041fb54b57fe30b478aefc7d7f12d68e64f1ad87807452fb94
SHA512

970a05614f7bd1b56814bd4f08743100bf98ffe3d88be59772c08f68f84b2a517ea948d9a9756b579bde34e0d4ec2a5abbc1ef4cc7cc71394d56c82f136f0af6
SSDEEP

768:CWZW7IPEmTq6OpFKtvgYI9trqhi9+cFqNnOGD7I:CWZWrgEp4ADrqhi9J3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
813f1115d4411aabebec2ec8c365e570_NeikiAnalytics

Files

813f1115d4411aabebec2ec8c365e570_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

5c38107e64cd4223fa88126699fda74d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHBrowseForFolder

netshell

DllGetClassObject

oleaut32

SafeArrayGetVartype

msvbvm60

ord518
ord669
ord305
ord524
DllFunctionCall
__vbaExceptHandler
ord712
ProcCallEngine
ord644
ord570
ord100
ord614
ord544

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ