��!|R >==�-m�a���~����S����~�u9!sMboI[869�ً�9!с��7S[�Fw_��Br�/�Z��_���@��K�&���f��sʆKP��Q{�&��`Ҟ�V<�O�̾�_�����g�?�0oWܝ���A�����FhQ�_V�y����AIm���y��Qm�����+���uLߚ�[k���=�}N��)f��䇼���x��o�����iR�����^�W���%�r��+Ny��Uf �A�W��,�7�*DUs���t8W�'#���j�y�xk;͙ZLW�Z#��שT�0�Q 8�~1��p��Xpȴ��YPSS;���M��XT��.B��uF�*.P�}y�o��JC�x`�.;��o߾Y���A�Ѐ��\���ˈ��H��2�A,��:��D�*&�v7�䱑A� ���uVn��mB�)���f!���6����qm��Ma����Kٺ�U����J��@�Ŀ����ڠ29����H�f��W_&��T�*ȓ��G�����/�:�E���j��s3?����:��$��g������γ��ک�=k��}��P�&-X�N���B`P��J��5Ak�"�*�� d"ܡG���Pf�*:�4l��aU ����t�,,�-Q�/� �S|&�\�WW��u���ܔ�m��q�-���&�$���Q�.�&���HM�..�-���?�g^�����/����(,%O�~=��S=��l;0M�kV�N ���|B)�uǔW�� �gx4,�6A<zr������o��f�!jfK���o_�����ԏ�rnbS9��������f�@�(��Wmٌ#�>���1�%��>�<�!��J�CZXU�K�9x.9c�J���� =JAK�\���͕��/^\K��W7������4]��P�2��=��v� z��u -}���E�nȊ�&����UIE� X*�分�RnzGّa���>��Ƨ��}zq9���X�A�)���*�T[>r�?�}�E��z��WJw��Q��L8.������I�XĦ��5�㤗���w�t=Z�B�F v�],zDԥ���}�#�8O����&�e�iʪx�*d�c�i�_TZ� �7 �0a^Q-x���!w)ٓD�_t�$�٦{Œ[���l@�Vw��e��Aam� w������л=��)�v�ܡ <YE�_r��T<�b�hj \�m��Ã�2����&<k�$�F�ru���*X�ѬD& |����(��*�3�])��]=?; ��qE6 �J�H4���OD:=֢����fIVR�Q2���p^��J^�zh����M���GU �qY��?����{;�G�ҷ�R��V�sc�l�*�WxmR5�V(��z��N��l���JJ�A������f��V�1��*�?���L�g�M�m�pX-�Qiɞ�ξ�%wG]ʄM�g��6�$�� ����RI���qܚU!�>��s��U�7���Z����P9���模'��*��&āTey=����:٫<�/�F'��{8���E��iP7����ƍA����Å� "�W�cݛ�1��fF�馼�Q��D�z| П/�X�j;���NO$�/�tr�,��ʟ���^��38�٘���v&���evRź�N;�����[$�ꊾ���C�;�I�ޏ_ש'̭�,!�3K�x,����;�A��q�<����ʛ!ç�2Oq���]�u� -�|-�#��&C��w�П�֮������&x38w'�cN#a��и=�d���˓�-��<����%�R����$�_x�?�:�1,v�W���K�Hh��B:l6�.������}�~��{No�W��7��=�^��9��)�UrYog��y퇑B�N9�������h���[{N��b�&�^аj�����Br�H�y�8�8��H+��[T>�<�q50MbZ�Ҷ��.n,۩�4�h6�2B��J�Gi� �t�ea9.���1V�r�B)<���C�Y��Xo�ײo� ��E���Yf���IE�j$ t$J�C=�Qԝ��Kf���R�N��g��ʖr�ڡ��}+��X� ���0Mz+�.Hd�<Qv'��L��B-0a.k�q<� ��ɦ8䨻K����N�qӫ�E���J�I!�M���������9m�n��b��Z۩�;z�7G�(��U����M���!��;�㚉)�D3�a�"�ƵLl\�c[2/������6�Cu���:��҅��;��ۍW����I��y��|�� �+����BϺi3֙a� G��][��Xpq��Hg���#���&��v ��̈��vk��egd-k����:A�$!'%f�T~7��X���W��-cO� ��N��ۮ �s"�%�ۮ�����wǏ�p��6��"ˣ� ؤ�Ai��B�<l�i���!;��P���=�hnL��vw�q�1B(֟��;��)Oz o�̊D���(��t����v���t�m:���T����L�O�4�=�#�Z*���5�c���vj��[�.!��_!�\��Z�<6��.���8?�;�k!���?���y������r�C ��K��1�w�?��#}x��׆E�̈́<D�A+ �FG#F��ScE1TP������ܯ��$dE���������t^&+x1�U�OY����4���r������ӝT��l�� ��E����f����z�O)�����j���z����"�5�OE�O��� �����6/_6�pD����m��fŧ=��ʇ��~�>�r����<+f�=��`��j$ ?.0O�ۯ�%�O1)�WM$�`����6fEQ���6���U�T��CrB�IY�s���t�:[~����� n��v�� /�Өa&��B9�fI�N�"3��)����x�h=��{'v����{"�I~��?��Gc����!p�����bFq� l^�)�;�6�gP�?��[��_������&؉�-./]8������� ��\�,IWpOƌ��p���DE<��d4��,d�j��y�G���ϴ�3n��ܚ��D��{'�y1�#��#uv�$���ئ�9����u} ����et]"�����6X�����H�6ɴ��6�6ᦦiB�l(��W��Nu��W��c�~>"�:���6x>�?6*��ϡQT�ۃ��sѥc<-K�4�.��"#X�c$��^�x2{dy,���-% x�Y�"���X���E� F����
Static task
static1
Behavioral task
behavioral1
Sample
60f3d0f64254ceef794db8034f5f2550_NeikiAnalytics.exe
Resource
win7-20240508-en
General
-
Target
60f3d0f64254ceef794db8034f5f2550_NeikiAnalytics
-
Size
3.1MB
-
MD5
60f3d0f64254ceef794db8034f5f2550
-
SHA1
0aabad2f9b09447747e0f46bdbf74c8b35aaeb50
-
SHA256
f799ba874f6ee86001b59af01823a4caf374f0fc615ee4a5c8c65302a30292a8
-
SHA512
dcf092b866a4b7293b819a87f023670c2b35cf33fa126d7cb533f59e7bb4c3f22fae5f881a1438de3a655b8b56c80f0eb90626f1900a8e48c29574d8df99b234
-
SSDEEP
98304:+gwoXlECvdTlWgpsFl3XTQX/ezJa5zG4l2Gu:ht11agOFdcXMSzL2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60f3d0f64254ceef794db8034f5f2550_NeikiAnalytics
Files
-
60f3d0f64254ceef794db8034f5f2550_NeikiAnalytics.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE