4b1f746dac1ebce2d4c6e9ff8e2fa270_NeikiAnalytics[.]exe

General

Target
4b1f746dac1ebce2d4c6e9ff8e2fa270_NeikiAnalytics.exe
Size 138KB
Sample240612-2yxt2axgql
SHA256 74ed26f9458485a200367b07166ada3e8422a3d3bba453d9ef7a60ad7cac20a4
MD5 4b1f746dac1ebce2d4c6e9ff8e2fa270
SHA1 afbb43a3c4f72a22a9517a14af9a6483c9512e47
SHA512 68c30adec7c132739adeb30783976a90622712ace25c96b8b50b2c76e8b3fee8ab293ee8810c3c844114ae8ffa53573fc9fed52b228ceefe92ccdeabe3bd61d0
SSDEEP 1536:rC2/fYuPfbESFYXRWhpKRycRd57JkIqFHhzm4hWru/BzihhMN45MF5FvHP132xPU:r7YubEwYXRWhpAJUHhzm4hUukS6KmecK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b1f746dac1ebce2d4c6e9ff8e2fa270_NeikiAnalytics.exe

File Explorer

4b1f746dac1ebce2d4c6e9ff8e2fa270_NeikiAnalytics.exe

.exe 138KB

4b1f746dac1ebce2d4c6e9ff8e2fa270_NeikiAnalytics.exe

IMPHASH 5324196b065927a27109509b2b1366dc
SHA256 74ed26f9458485a200367b07166ada3e8422a3d3bba453d9ef7a60ad7cac20a4
MD5 4b1f746dac1ebce2d4c6e9ff8e2fa270
SHA1 afbb43a3c4f72a22a9517a14af9a6483c9512e47
SHA512 68c30adec7c132739adeb30783976a90622712ace25c96b8b50b2c76e8b3fee8ab293ee8810c3c844114ae8ffa53573fc9fed52b228ceefe92ccdeabe3bd61d0
SSDEEP 1536:rC2/fYuPfbESFYXRWhpKRycRd57JkIqFHhzm4hWru/BzihhMN45MF5FvHP132xPU:r7YubEwYXRWhpAJUHhzm4hUukS6KmecK
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10816

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub __vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaLateIdCall __vbaStrVarMove __vbaLenBstr __vbaPut3 __vbaEnd __vbaFreeVarList _adj_fdiv_m64 __vbaPut4 __vbaGetFxStr3 __vbaFreeObjList __vbaGetFxStr4 _adj_fprem1 __vbaRecAnsiToUni __vbaCopyBytes __vbaResume __vbaVarCmpNe __vbaStrCat __vbaLsetFixstr ord660 ord553 __vbaRecDestruct __vbaSetSystemError ord554 __vbaNameFile __vbaHresultCheckObj __vbaLenVar _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaLateMemSt ord592 ord593 __vbaExitProc __vbaI4Abs ord594 ord595 __vbaObjSet __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaVarIndexLoad ord598 __vbaFpR4 ord599 __vbaStrFixstr ord520 __vbaFPFix __vbaBoolVarNull __vbaRefVarAry _CIsin ord631 ord709 ord525 ord632 __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError ord528 __vbaStrCmp ord529 __vbaPutOwner3 __vbaAryConstruct2 __vbaVarTstEq __vbaI2I4 __vbaObjVar DllFunctionCall ord563 ord670 __vbaRedimPreserve __vbaLbound _adj_fpatan __vbaR4Var __vbaFixstrConstruct __vbaLateIdCallLd __vbaRedim __vbaStrR8 __vbaRecUniToAnsi EVENT_SINK_Release ord600 __vbaUI1I2 _CIsqrt __vbaVarAnd EVENT_SINK_QueryInterface __vbaUI1I4 __vbaExceptHandler ord711 __vbaStrToUnicode ord606 _adj_fprem _adj_fdivr_m64 ord607 __vbaI2Str ord608 ord531 ord716 __vbaFPException __vbaInStrVar ord532 __vbaStrVarVal __vbaUbound __vbaVarCat ord535 __vbaI2Var ord644 ord537 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaR8Str ord648 __vbaVar2Vec ord570 __vbaNew2 __vbaInStr ord571 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaI4Str ord681 __vbaFreeStrList ord576 _adj_fdivr_m32 ord577 _adj_fdiv_r ord578 ord685 ord100 __vbaVarTstNe ord579 __vbaI4Var ord610 __vbaAryLock __vbaVarAdd __vbaLateMemCall __vbaStrToAnsi __vbaVarDup __vbaFpI4 __vbaVarCopy ord616 __vbaRecDestructAnsi __vbaR8IntI2 ord617 __vbaLateMemCallLd _CIatan __vbaUI1Str ord618 __vbaI2ErrVar __vbaCastObj __vbaStrMove __vbaAryCopy __vbaStrVarCopy ord619 ord542 _allmul ord545 _CItan __vbaAryUnlock _CIexp __vbaI4ErrVar __vbaFreeObj __vbaFreeStr ord581

Sharing