dcbbf7fa5e4735c4481cfa607b0abf10_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dcbbf7fa5e4735c4481cfa607b0abf10_NeikiAnalytics
Size

3.7MB
MD5

dcbbf7fa5e4735c4481cfa607b0abf10
SHA1

59dda0e8b0719f842e27e3e0aeda6d03895c97b7
SHA256

670fdf375315b1a7cce18b3b374d62f20fa3fb6014129796e5ff273d1db32042
SHA512

e7eae25493eb28448f988bd7277a0289d166889c08602d248c4fdfe47300117f8cdea8f26e0ddc9e63a278de8d9c0649d30fa0835acd31749d929b0024bb4f7e
SSDEEP

24576:/sVILgWGRq1AkvHcZQUHr64jRvFx0NWa:/XJ82/84qvD0o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dcbbf7fa5e4735c4481cfa607b0abf10_NeikiAnalytics

Files

dcbbf7fa5e4735c4481cfa607b0abf10_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

e39d037acde6b096f84bdccfceac0cd4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord666
ord595
ord631
ord526
DllFunctionCall
ord601
__vbaExceptHandler
ord711
ord606
ord717
ProcCallEngine
ord644
ord537
ord578
ord100

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.7MB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ