75e2ee5fd560b2c7f53bf00537250710_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75e2ee5fd560b2c7f53bf00537250710_NeikiAnalytics.exe
Size

476KB
MD5

75e2ee5fd560b2c7f53bf00537250710
SHA1

5c107e170c423b9f6cb462fb8e6128200a61db87
SHA256

b510d48af15e64415cf49a7983ee28eb157cb7b83d9046c4905f766ff81995ba
SHA512

16ae552d731dac434a4d151a0222ea8b953868ef3d0503d316247c3262ca96e7c8c5af77388b7061f9b779077dbb9215996e9b9193bf5ddc38cf345a6f85b950
SSDEEP

6144:Uuc1r5SrAqSQ7MX7hXyCkhoDYLVHHydk913:Ui7MX7hyTVnL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75e2ee5fd560b2c7f53bf00537250710_NeikiAnalytics.exe

Files

75e2ee5fd560b2c7f53bf00537250710_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

034f99dbc0747d7965bbc9e1eb5887f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord519
ord552
ord553
ord660
ord661
ord662
ord557
ord591
ord669
ord592
ord300
ord301
ord595
ord303
ord598
ord599
ord306
ord520
ord307
ord309
ord631
ord632
EVENT_SINK_AddRef
ord527
ord528
ord560
ord561
DllFunctionCall
ord670
ord564
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord712
ord607
ord608
ord531
ord716
ord534
ProcCallEngine
ord537
ord645
ord538
ord681
ord685
ord100
ord612
ord613
ord617
ord619
ord542
ord652
ord545
ord581

Sections

.text
Size: 468KB - Virtual size: 465KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ