bb04fbfc9b5c6f4857a300290fdd1fd0_NeikiAnalytics[.]exe

General

Target
bb04fbfc9b5c6f4857a300290fdd1fd0_NeikiAnalytics.exe
Size 60KB
Sample240603-srtdlabh39
SHA256 ae944b0488452cd938b638da0457c962ec8a52cb57045b4be06246a089d93d0d
MD5 bb04fbfc9b5c6f4857a300290fdd1fd0
SHA1 c111f84bb8dc4a9d50563a8d74d18d3240bd96cf
SHA512 0ef56619ad8da708b168a00962c943e6222181fa27b0f455a7637d66fc354235745ba56c4b6a75d0ce9647065175496b55a07704df0ba53d42d8f287941efe69
SSDEEP 768:4DY1TZCJrQ0Vd0wZxg/xwvbpjExDbdKODNZGSk3:MKTZivV5ObdKODNZGx
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb04fbfc9b5c6f4857a300290fdd1fd0_NeikiAnalytics.exe

File Explorer

bb04fbfc9b5c6f4857a300290fdd1fd0_NeikiAnalytics.exe

.exe 60KB

bb04fbfc9b5c6f4857a300290fdd1fd0_NeikiAnalytics.exe

IMPHASH eda3f17c21855bfe2d61cf1f577127c8
SHA256 ae944b0488452cd938b638da0457c962ec8a52cb57045b4be06246a089d93d0d
MD5 bb04fbfc9b5c6f4857a300290fdd1fd0
SHA1 c111f84bb8dc4a9d50563a8d74d18d3240bd96cf
SHA512 0ef56619ad8da708b168a00962c943e6222181fa27b0f455a7637d66fc354235745ba56c4b6a75d0ce9647065175496b55a07704df0ba53d42d8f287941efe69
SSDEEP 768:4DY1TZCJrQ0Vd0wZxg/xwvbpjExDbdKODNZGSk3:MKTZivV5ObdKODNZGx
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5184

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarTstGt _CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaLateIdCall __vbaStrVarMove __vbaLenBstr __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList _adj_fprem1 ord519 __vbaStrCat __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct __vbaExitProc __vbaOnError __vbaObjSet ord595 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaBoolVar __vbaVarTstLt _CIsin ord709 ord631 __vbaChkstk __vbaFileClose EVENT_SINK_AddRef ord527 __vbaStrCmp ord560 __vbaI2I4 _adj_fpatan __vbaLateIdCallLd EVENT_SINK_Release __vbaNew _CIsqrt __vbaLateIdCallSt __vbaObjIs EVENT_SINK_QueryInterface __vbaExceptHandler __vbaPrintFile ord712 _adj_fprem _adj_fdivr_m64 __vbaLateIdStAd __vbaFPException ord717 __vbaStrVarVal __vbaVarCat ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaVar2Vec ord648 __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 ord577 _adj_fdiv_r ord685 ord100 __vbaI4Var __vbaVarDup __vbaFpI4 _CIatan ord618 __vbaStrMove __vbaCastObj _allmul __vbaLateIdSt _CItan ord546 _CIexp __vbaFreeObj __vbaFreeStr ord581

Sharing