2e04b4533add721c75a7dda5038ffb60_NeikiAnalytics[.]exe

General

Target
2e04b4533add721c75a7dda5038ffb60_NeikiAnalytics.exe
Size 308KB
Sample240525-2p86psdh93
SHA256 25f95050d2bf0875c9224302efb83f155a54a6842af3e9f53d114dcd8d657507
MD5 2e04b4533add721c75a7dda5038ffb60
SHA1 afe361ecdb6e86832d1d0bc1c87b4b5167093818
SHA512 d716004aacb54002a16f7e6eb0a5a4aa380898ee1ee3810abd8952768c62b3e71bf4843e0fac89acbe6b8c5bede9c5bbe6c8325daf9b3b8a99961a0b9dd4a8c0
SSDEEP 3072:gXYjFeH5Mc8SmaS+n6LQfrREHjShClmyikCUWDuP7w9Z0P97HpCZV:giTemfepfFEHu8zw0P97H
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e04b4533add721c75a7dda5038ffb60_NeikiAnalytics.exe

File Explorer

2e04b4533add721c75a7dda5038ffb60_NeikiAnalytics.exe

.exe 308KB

2e04b4533add721c75a7dda5038ffb60_NeikiAnalytics.exe

IMPHASH 2fff99d1ba9e80ffa08ad5e22ab4d61a
SHA256 25f95050d2bf0875c9224302efb83f155a54a6842af3e9f53d114dcd8d657507
MD5 2e04b4533add721c75a7dda5038ffb60
SHA1 afe361ecdb6e86832d1d0bc1c87b4b5167093818
SHA512 d716004aacb54002a16f7e6eb0a5a4aa380898ee1ee3810abd8952768c62b3e71bf4843e0fac89acbe6b8c5bede9c5bbe6c8325daf9b3b8a99961a0b9dd4a8c0
SSDEEP 3072:gXYjFeH5Mc8SmaS+n6LQfrREHjShClmyikCUWDuP7w9Z0P97HpCZV:giTemfepfFEHu8zw0P97H
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

16652

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarTstGt __vbaVarSub __vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaVarVargNofree ord187 __vbaFreeVar __vbaAryMove ord588 __vbaStrVarMove __vbaLenBstr __vbaFreeVarList __vbaPut3 __vbaEnd _adj_fdiv_m64 __vbaPut4 __vbaFreeObjList ord516 __vbaStrErrVarCopy _adj_fprem1 __vbaRecAnsiToUni ord518 __vbaStrCat ord660 __vbaLsetFixstr __vbaSetSystemError __vbaRecDestruct __vbaHresultCheckObj ord555 __vbaLenBstrB __vbaLenVar _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaLateMemSt __vbaVarIndexLoadRefLock ord669 __vbaForEachCollObj ord593 __vbaVarForInit __vbaObjSet __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaVarIndexLoad __vbaBoolVar __vbaStrFixstr ord520 __vbaBoolVarNull __vbaFpR8 _CIsin __vbaErase ord709 __vbaNextEachCollObj __vbaVarZero ord632 __vbaChkstk __vbaFileClose ord526 EVENT_SINK_AddRef __vbaGenerateBoundsError ord528 __vbaExitEachColl __vbaGet3 __vbaStrCmp __vbaVarTstEq __vbaAryConstruct2 __vbaPutOwner3 __vbaI2I4 DllFunctionCall __vbaVarOr __vbaFpUI1 __vbaCastObjVar __vbaRedimPreserve __vbaLbound _adj_fpatan __vbaFixstrConstruct __vbaLateIdCallLd __vbaRedim __vbaRecUniToAnsi __vbaDerefAry EVENT_SINK_Release __vbaNew __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaUI1I4 __vbaFpCmpCy __vbaVarMul __vbaExceptHandler ord711 __vbaStrToUnicode ord712 _adj_fprem _adj_fdivr_m64 __vbaFailedFriend ord607 ord608 __vbaFPException ord717 __vbaInStrVar __vbaStrVarVal __vbaUbound __vbaVarCat __vbaGetOwner4 ord535 __vbaI2Var ord644 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaVar2Vec __vbaNew2 __vbaInStr __vbaVarInt _adj_fdiv_m32i ord572 _adj_fdivr_m32i ord573 __vbaStrCopy ord681 __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 __vbaPowerR8 _adj_fdiv_r ord685 ord578 ord100 __vbaVarTstNe __vbaI4Var __vbaAryLock __vbaVarAdd __vbaStrToAnsi __vbaVarDup __vbaFpI2 __vbaFpI4 __vbaVarCopy __vbaLateMemCallLd ord617 _CIatan __vbaCastObj __vbaStrMove __vbaAryCopy __vbaR8IntI4 ord619 __vbaStrVarCopy _allmul _CItan __vbaFPInt __vbaUI1Var __vbaAryUnlock __vbaVarForNext _CIexp __vbaFreeStr __vbaFreeObj __vbaI4ErrVar

Sharing