ef96a5678a13a8895ddf0108062b5cf0_NeikiAnalytics[.]exe

General

Target
ef96a5678a13a8895ddf0108062b5cf0_NeikiAnalytics.exe
Size 220KB
Sample240517-ttya1agb38
SHA256 f5a96976d0328cdce9e3cca647feff6ec1d6fb10ddb2d53e312004f9860dc069
MD5 ef96a5678a13a8895ddf0108062b5cf0
SHA1 7d23382f492ae355798508e1a31a03f3b927868a
SHA512 415b5511c6e9a284bb1b78dedfee3f20f710fc2d587cd3f9e71eec4850a5360c8f58284c70555fed887f48273b8a8dd95fe157b064ab33f6a73f802f483abce1
SSDEEP 3072:sUXdTLgDKXQCtwNlzFinat0t7MqcB7gNXFx3MyVwTcoh0gIXmHeD0VaJ64MY:sUXdTLgfCSHYnhkaFx3c7CdbJ64l
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef96a5678a13a8895ddf0108062b5cf0_NeikiAnalytics.exe

File Explorer

ef96a5678a13a8895ddf0108062b5cf0_NeikiAnalytics.exe

.exe 220KB

ef96a5678a13a8895ddf0108062b5cf0_NeikiAnalytics.exe

IMPHASH 9d179117d684845722a9bc95da16d6ee
SHA256 f5a96976d0328cdce9e3cca647feff6ec1d6fb10ddb2d53e312004f9860dc069
MD5 ef96a5678a13a8895ddf0108062b5cf0
SHA1 7d23382f492ae355798508e1a31a03f3b927868a
SHA512 415b5511c6e9a284bb1b78dedfee3f20f710fc2d587cd3f9e71eec4850a5360c8f58284c70555fed887f48273b8a8dd95fe157b064ab33f6a73f802f483abce1
SSDEEP 3072:sUXdTLgDKXQCtwNlzFinat0t7MqcB7gNXFx3MyVwTcoh0gIXmHeD0VaJ64MY:sUXdTLgfCSHYnhkaFx3c7CdbJ64l
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

141328

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarTstGt __vbaVarSub ord690 ord691 _CIcos _adj_fptan __vbaVarMove __vbaFreeVar __vbaStrVarMove __vbaLenBstr __vbaFreeVarList _adj_fdiv_m64 ord516 _adj_fprem1 __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj __vbaLenVar _adj_fdiv_m32 __vbaAryDestruct __vbaExitProc __vbaOnError __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord520 __vbaBoolVarNull __vbaVarTstLt _CIsin ord632 __vbaChkstk __vbaFileClose ord526 EVENT_SINK_AddRef __vbaGenerateBoundsError ord529 __vbaStrCmp __vbaAryConstruct2 __vbaVarTstEq __vbaObjVar DllFunctionCall _adj_fpatan EVENT_SINK_Release ord600 _CIsqrt __vbaVarAnd EVENT_SINK_QueryInterface __vbaUI1I4 __vbaExceptHandler __vbaPrintFile __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 ord608 ord716 __vbaFPException __vbaStrVarVal __vbaVarCat _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList __vbaVarCmpLt _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaVarTstNe __vbaVarSetVar __vbaI4Var ord689 ord610 __vbaLateMemCall __vbaStrToAnsi __vbaVarSetObjAddref _CIatan __vbaStrMove __vbaCastObj _allmul _CItan _CIexp ord580 __vbaFreeObj __vbaFreeStr

Sharing