20e96afb2fb505654f8e201875e6ec30_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20e96afb2fb505654f8e201875e6ec30_NeikiAnalytics.exe
Size

72KB
MD5

20e96afb2fb505654f8e201875e6ec30
SHA1

794fd398e5fb541edb0bd232e5df4e77990fa2a3
SHA256

ce38277957bb79e4fc2ca49fbd14aa54df5d4c30b9e1391089e58a40a7d6370a
SHA512

911271d17c2debc0598859c9eb9caaf1db3fc2fca1e492e8b7d91fb5ea46cef3729ef77e498d1fc974fb33b35719ad2e425c5d67afaf439903789c59cd0402a1
SSDEEP

768:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrPv4:ieTce/U/hKYuKPw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20e96afb2fb505654f8e201875e6ec30_NeikiAnalytics.exe

Files

20e96afb2fb505654f8e201875e6ec30_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

1639b1e17656fed4f63bac94cbb79cec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord594
ord595
ord598
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord530
ord716
ProcCallEngine
ord537
ord645
ord570
ord685
ord100
ord616
ord546
ord547
ord580

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ