288ed7575cd72d464a6c543e66100440_NeikiAnalytics[.]exe

General

Target
288ed7575cd72d464a6c543e66100440_NeikiAnalytics.exe
Size 1.0MB
Sample240612-jgqqaavclm
SHA256 a49159d719d1dbce57fb089a7388cd4a0123818a9ea1185bb5073b38d6a35960
MD5 288ed7575cd72d464a6c543e66100440
SHA1 e6aa4a02447206dfe15e79707ddbab7e960bfafb
SHA512 56249e7a473b6f7f00f276535c879880ae8f56a14aaf27128020e14587f9b23dc86844aa969d163c5260eba99d8af208e63dd51b4b53a3b84400e3c941a132d1
SSDEEP 3072:Fd0ZygrrggrgrgrgrAkzNjcWUlS+oHpR2OPKR:wZJoNaSpRVP
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
288ed7575cd72d464a6c543e66100440_NeikiAnalytics.exe

File Explorer

288ed7575cd72d464a6c543e66100440_NeikiAnalytics.exe

.exe 1.0MB

288ed7575cd72d464a6c543e66100440_NeikiAnalytics.exe

IMPHASH 4c0946e6fe1dc4fc43a1db6a4694e680
SHA256 a49159d719d1dbce57fb089a7388cd4a0123818a9ea1185bb5073b38d6a35960
MD5 288ed7575cd72d464a6c543e66100440
SHA1 e6aa4a02447206dfe15e79707ddbab7e960bfafb
SHA512 56249e7a473b6f7f00f276535c879880ae8f56a14aaf27128020e14587f9b23dc86844aa969d163c5260eba99d8af208e63dd51b4b53a3b84400e3c941a132d1
SSDEEP 3072:Fd0ZygrrggrgrgrgrAkzNjcWUlS+oHpR2OPKR:wZJoNaSpRVP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5392

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarTstGt __vbaVarSub _CIcos _adj_fptan __vbaVarMove __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaEnd __vbaPut3 __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList ord516 _adj_fprem1 __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj ord556 _adj_fdiv_m32 __vbaAryVar ord666 __vbaAryDestruct ord592 __vbaExitProc __vbaOnError ord595 __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 __vbaVarIndexLoad __vbaFpR4 _CIsin __vbaErase __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef __vbaGet3 __vbaStrCmp __vbaVarTstEq __vbaObjVar __vbaI2I4 DllFunctionCall _adj_fpatan __vbaR4Var __vbaRedim EVENT_SINK_Release ord600 _CIsqrt EVENT_SINK_QueryInterface __vbaStr2Vec __vbaVarMul __vbaExceptHandler ord711 _adj_fprem _adj_fdivr_m64 __vbaI2Str ord608 ord716 __vbaFPException ord717 __vbaStrVarVal __vbaUbound __vbaVarCat ord535 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 __vbaR8Var _adj_fdiv_r ord685 ord100 __vbaVarSetVar __vbaI4Var __vbaAryLock __vbaVarAdd __vbaVarDup __vbaFpI4 __vbaVarLateMemCallLd __vbaVarCopy __vbaLateMemCallLd _CIatan __vbaAryCopy __vbaStrMove __vbaStrVarCopy _allmul _CItan __vbaAryUnlock _CIexp __vbaMidStmtBstr __vbaFreeStr __vbaFreeObj

Sharing