3c4e29a525618dab8d7d0b3c0a1292c0_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

3c4e29a525618dab8d7d0b3c0a1292c0_NeikiAnalytics.exe
Size

204KB
MD5

3c4e29a525618dab8d7d0b3c0a1292c0
SHA1

95af0d3611913cd3a5892be0c6d3066f78ff967b
SHA256

1599bf242d2b919222a281de0aa3f210f1f5c1b5462f78ae0834d63868ed4c82
SHA512

f47a78b942652c0bee5a977653387464d65979cb1bc94a08ca97170e14457262950faf5d637ce4f4c2c3e20c8f50e4e6bc74398a3dd4afe3f98cc44550b797ce
SSDEEP

3072:kmNW8A0tQ9nLHbB9W0c1TqECzR/mkSYGrl9ymgYUWaf:/cn4QxL7B9W0c1RCzR/fSmlj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c4e29a525618dab8d7d0b3c0a1292c0_NeikiAnalytics.exe

Files

3c4e29a525618dab8d7d0b3c0a1292c0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

abe8603b44f3b25eb24729987e33578b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord588
MethCallEngine
ord516
ord517
ord518
ord519
ord669
ord593
ord300
ord594
ord598
ord306
ord520
ord709
ord631
ord525
ord632
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord564
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord647
ord573
ord681
ord578
ord100
ord579
ord616
ord617
ord618
ord619
ord581

Sections

.text
Size: 180KB - Virtual size: 178KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ