44ef33b9aeec26da58ba364aaa027bb0_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

44ef33b9aeec26da58ba364aaa027bb0_NeikiAnalytics.exe
Size

40KB
MD5

44ef33b9aeec26da58ba364aaa027bb0
SHA1

4a7318a3d0db7397336e4c701250b19ac8506b60
SHA256

fb421c4ce47a1a2fe212b2e95b434d079c456c0a49927304fb1662e7dedff171
SHA512

8c04efe38c1aee15c1be1a82cff3d374f929166b603a7051aa36aa7d658898dce3bd4f2d86d5f9e2ec77ba588929282eb44f04d8c49e776c15786697c221a69b
SSDEEP

768:83fko/XiYNjz1F8p8F9bdHXtHs7CQpcdHoCCvc:8smNjza8F95NWee1vc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44ef33b9aeec26da58ba364aaa027bb0_NeikiAnalytics.exe

Files

44ef33b9aeec26da58ba364aaa027bb0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

8a0a5343feaaabb3dea2557cc7b45ead

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord517
ord518
ord593
ord594
ord598
ord520
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord573
ord685
ord100
ord616
ord618
ord546
ord547
ord580

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ