2f47627717be60c13ac6bc34524659a95db8c4ac57a49138c4cc3e8b73c580a0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f47627717be60c13ac6bc34524659a95db8c4ac57a49138c4cc3e8b73c580a0_NeikiAnalytics.exe
Size

120KB
MD5

d2ad9482e510d800649fba67bc8e7c20
SHA1

e2b9dff020cfbdf9ecbdb7361d4271b6f185e6ec
SHA256

2f47627717be60c13ac6bc34524659a95db8c4ac57a49138c4cc3e8b73c580a0
SHA512

05d2ee764e88a6e636593af1280666dde4f7abe4faeccf8f18116517a0d26ad0b14ff7799f42ab6df28f854b7db0f63ffb3885408c2faf8051d264c735f97c11
SSDEEP

3072:eJwdLXX5AfGZf1OwrJJbT68ZFcPZAhyZdng:eILn5A0hJ9DIBk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f47627717be60c13ac6bc34524659a95db8c4ac57a49138c4cc3e8b73c580a0_NeikiAnalytics.exe

Files

2f47627717be60c13ac6bc34524659a95db8c4ac57a49138c4cc3e8b73c580a0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

18d6303da144fae5361da9cfb123b000

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

mixerMessage

imm32

ImmSimulateHotKey

advapi32

AreAllAccessesGranted

gdi32

CreateDIBPatternBrush

msvbvm60

DllFunctionCall
__vbaExceptHandler
ProcCallEngine
ord644
ord100
ord430

Sections

.text
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ