38873f73edec8abcd9b23cd06da498d0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38873f73edec8abcd9b23cd06da498d0_NeikiAnalytics.exe
Size

78KB
MD5

38873f73edec8abcd9b23cd06da498d0
SHA1

e9eba385aaeab4806a433c28dfbe101a80c60ed5
SHA256

2a5d40a01565342e0ed526aae51070d621af55a7183c9c013ab7c1ef7177a4bc
SHA512

1ab3252fd6e4bedc63828ab7b5c04bce17bc5effb15e2dd2a7a4cbfa0b1476832eff1b30832385008afe7c2faa1d708142d2e5ab1e8b2aeba20ba69c08a2c01b
SSDEEP

768:hpQNwC3BEddsEqOt/hyJF+x3BEJwRrPHisKl4qh5:reTce/U/hKYuKPHisKldh5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38873f73edec8abcd9b23cd06da498d0_NeikiAnalytics.exe

Files

38873f73edec8abcd9b23cd06da498d0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

1639b1e17656fed4f63bac94cbb79cec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord594
ord595
ord598
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord530
ord716
ProcCallEngine
ord537
ord645
ord570
ord685
ord100
ord616
ord546
ord547
ord580

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE