55a132dba2053158585d313ad0f023c0_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

55a132dba2053158585d313ad0f023c0_NeikiAnalytics.exe
Size

584KB
MD5

55a132dba2053158585d313ad0f023c0
SHA1

66e7e563eeb5241b43c2b27a9211c73096e84e7d
SHA256

51f62b424a7e5b44d7360141c0fa0c6c32ed9b9e1ff4a80d835c5736765726b9
SHA512

97fef76e1fc71027cd72a291878a580ab9755cae29f3ba1b1c7840b08446b2c71f3ddf7300474b518ceb46899f93933d0465dc7dc8cd0f7e6870e71d10d05fe9
SSDEEP

6144:Aq2bj+bet2RO2Qy7yxY+2u8eoNMqmeFrPRKBYoUJxtt8I3PLWe2PbJkmIfkCy:AqO+3R4y7yxoh0BGeiWe2PbJkmIfBy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55a132dba2053158585d313ad0f023c0_NeikiAnalytics.exe

Files

55a132dba2053158585d313ad0f023c0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

cde96de4d401920536935a4a074c6aa8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord552
ord553
ord660
ord557
ord595
ord596
ord598
ord305
ord599
ord520
ord522
ord524
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord560
ord561
DllFunctionCall
EVENT_SINK_Release
ord600
ord311
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord313
ord712
ord606
ord714
ord608
ord716
ord534
ProcCallEngine
ord537
ord645
ord648
ord571
ord681
ord685
ord100
ord610
ord612
ord613
ord617
ord618
ord619
ord545
ord546
ord581

Sections

.text
Size: 576KB - Virtual size: 575KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ