5b489dd68c0fe003dbf340a428b12140_NeikiAnalytics[.]exe

General

Target
5b489dd68c0fe003dbf340a428b12140_NeikiAnalytics.exe
Size 304KB
Sample240524-vbhm9sch56
SHA256 a3ea847e0b96858a2e18982391eb3db69f7ca6f71485b86b110907f0a5c771fe
MD5 5b489dd68c0fe003dbf340a428b12140
SHA1 2012e55f144bce0dd890693a995d2671428213a0
SHA512 4710235d770a1e5a9eec9ce4d0d3270521d5234e2455bacd32594ff6bc58efdd178b7b2979efae108c310fed1ea6f045552344a7fb2bbb02558eec358a4056fa
SSDEEP 3072:+ogL5tpV+CSA1AAPoCpxW5ATBfUPhpS1svkTVC9FieYTTLprx/m3qT4S826guKq5:StpvoCpcPe1jQdifGBEBXRILSQgTy
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b489dd68c0fe003dbf340a428b12140_NeikiAnalytics.exe

File Explorer

5b489dd68c0fe003dbf340a428b12140_NeikiAnalytics.exe

.exe .vbs 304KB

5b489dd68c0fe003dbf340a428b12140_NeikiAnalytics.exe

IMPHASH 3274dc16fb06c92a0119b94734d01456
SHA256 a3ea847e0b96858a2e18982391eb3db69f7ca6f71485b86b110907f0a5c771fe
MD5 5b489dd68c0fe003dbf340a428b12140
SHA1 2012e55f144bce0dd890693a995d2671428213a0
SHA512 4710235d770a1e5a9eec9ce4d0d3270521d5234e2455bacd32594ff6bc58efdd178b7b2979efae108c310fed1ea6f045552344a7fb2bbb02558eec358a4056fa
SSDEEP 3072:+ogL5tpV+CSA1AAPoCpxW5ATBfUPhpS1svkTVC9FieYTTLprx/m3qT4S826guKq5:StpvoCpcPe1jQdifGBEBXRILSQgTy
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86 polyglot

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6928

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub ord690 _CIcos _adj_fptan __vbaVarMove __vbaFreeVar __vbaStrVarMove __vbaEnd __vbaFreeVarList _adj_fdiv_m64 __vbaNextEachVar __vbaFreeObjList _adj_fprem1 ord518 __vbaStrCat ord660 __vbaStrDate __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct __vbaExitProc __vbaOnError __vbaObjSet _adj_fdiv_m16i _adj_fdivr_m16i __vbaFpR4 __vbaBoolVarNull _CIsin __vbaVarZero __vbaChkstk EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaVarTstEq __vbaDateR8 __vbaObjVar __vbaI2I4 DllFunctionCall __vbaVarOr _adj_fpatan __vbaR4Var __vbaRedim EVENT_SINK_Release _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler __vbaDateStr _adj_fprem _adj_fdivr_m64 ord716 __vbaFPException __vbaStrVarVal __vbaVarCat ord534 __vbaI2Var _CIlog __vbaErrorOverflow __vbaNew2 __vbaVarLateMemCallLdRf __vbaR8Str _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList __vbaVarNot _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaVarTstNe __vbaVarSetVar __vbaI4Var ord689 ord610 __vbaAryLock __vbaVarAdd __vbaLateMemCall ord612 __vbaVarDup __vbaStrToAnsi __vbaFpI2 __vbaFpI4 __vbaVarLateMemCallLd __vbaVarCopy _CIatan __vbaStrMove ord619 __vbaForEachVar _allmul _CItan ord546 __vbaAryUnlock _CIexp __vbaFreeObj __vbaFreeStr ord580

Sharing