������k���&��Z�)�zB�� ,'����Ku-��a8/�PI͍$�������=q�&/���d��[���`���4�ȟZ�o�K�Ju|��Qն���Nf�V��)���j�U}���[�;���5�&������"3�YC(&E��g�j�1n�������m��V�ZC`�A(���xl���;�����f�S��6~�C7E�2*�X��Htg*w3*$���̯$ �R,%O1I�M��١�T1�˶�iW�s.� ��o��D����s#���F�R@�;(�Ѧ���(If����tXƖӰ�Ɛ�I�A�������p�>z��4�����h��k��I�C~�X=h}�_�[w���w�OI�+���/Eзm׳����u� �YF�� ��1�<��8�xe�̆�9%�`�����U����r�W0�ҟ}�I��;� M��L:�#63og��3�T 6-�N�q)�~�v�NC{+3�(��/W�������ߐe-!ބEFf<+�!7�^���ƃ��\�$xBɉH]���ݕs[�r3� O�]+>����G������k���8hr�<9�L���m�?���h��Y_����<����U�|�@��w��XS5B��DǼ���?�Ι�����}Ee��pS^���zdd��v�)�u�5��\5\����c��˘��1�5�>3�Q�; �6���+�~6z_����)g��rm��8ۿ���Q�:(�.� ��ຓ��$����@uRt�.s�֮j:X��j$P�H�� VQ"&�y�r幻 Q!�Q�xLˋ$U�����3w�Q�,�a-EF��� ���'4�i���oMx�Ni&���/�ަ��I�1�&w��q�D Ѳ��1�78 ��q6�&��f�/��o݇І�4���3ɚ�bmN" e@V��"k�#��V*�6O��0�sC6W,���<���j��=��ȭc��^�[v��2`����&h E� "40Y��Ս��j#n���қ��L��G[� !D������%�W{��P�p�QK���%\@g<�A��{#���'�UVD�-#�H����p����y۫ɺ�Mp:����!Y� U�$��G=C�#����R�:��bgG�VP�M�@�G���c���Q�c�zT�'�X�_���Y-&c�R,��'T���][;�3}pאV�s S����yQ��JV���:�C���B��#�J��#*���o��>����A"|��#��b?�G�Z&C|>/�f�x�,�� YG�r���%�L������+r�����wV� On����6C���l�e���� h��� �]�S*l�D4E�,:k�:ߧ\��{��rkT �S�a�@�[Q��R`#��m������_�������k|c�nCK��y��OM���k�y���F5�e����=�w |�\���U<�������K����N�'�dZ�@By��d��ݸv�Ē >��C��A�5�L���b�0;�ר�5���r妧�)�md�%k�S���X���2\Nx<G6+�?r��q��/�|�⸐4������|�1 ��Ù�&ܘ����?`���,��u����ʑ]v�������t̴N�V�G �������ś+A��k �.� �_R�pH�~� ��Nʾ�&v`Ȫ��8�bѱG��;=���݈Ӡ"Ƈ��u&�}��h�� ��2�� ����ʸa�SK� �:��U���@t���q>������`���H�i�T�ʣہ�?���ټ[�� i3��0��%V��F~~�o��E�ꆾ��`���Г�9�]��y���݈4D�0�<�o�kB���vB��? q�94&�_����p�ݒ��B*��$��r�u�VO}�i�7�$z�WԛY���ͣ�����u�� rgj�Ԫ8����Nܶ�Ӷ��}�I9p��o&������1�4$��#��s]���s$AT�ۦ&�^:/��1�4�x�����N�՟���@�Q���j�/��K���[E�| P�������h�ߵ'�V���^U��w�li���;����-�/�Pc[������C��e��>�C�;�Kh &�K�j�N]��U?��Lz�a}?r�$I;�S8_&>:��I��>��\S���A�M�X��&qs��l��E�!��S~ӯ?��d�6�W�D��0���2��p#�E�F?��k�9�1j:I�VR�!���͕��G<�;���Y\W��=���^�7��^v�F IM>��+���cy:� �cX�>���w筇#���5�iOa�ٿ&Ql���G���z/�� u�T� ��r�пB�'�|4^������N�����Q���1[�lFOi������u�~���y�xVmO@�D�������"��n ax�L&2@�����S$��[N�в����`�7'���!�T�1dɧ8W���YӺK�G l�d�p�`��i�}�a>2�g~Kp�c�]�e�Nh�I�H����w�y���8���M��_΅�牓nD�)+xBSr�w�SwE/���>N��n$p�c [��Ɓ'��W��וek�_ !���R�W"T<�M�|V s�K�c2���M}��#����^���s���| ,4.>r��N�gX��>꾨 t<W�#�]�b�LV:��`P���� |��L�.�yʱk�w��]x.��y�04��~u�R{�?S�P��x�t/e�A�a�ԇ`��S����h�y�AW��'��N%�?9�����!&��U�n|S�e�=Lg�׳zi���qB�iZX�)������9�0z`e����Lˋe��7�;XS]�?�����k��?��t��ڤ�25��h��;5���� 1�|��kn��Q�튔V<ZR��ʶU -z+k;�\��Q���Q����T\�/��(j����Z��ܦ0�1 �2�n�R.f�~��6o�v�ɰ�δ�I%u_����`Np�A��Tm�w���}�q��� E��m��[�� _��ǜ�3���������c��%�p#N#X�DE��t\O��8e�Dž��s]{9�빑�'�-M�q=�V�2���e�.Ka?!����(Ż���H�?���^���@w6�ņr�dO�х�'|;W� �� �(X5��ϱT����z, ���Y�Ѩ�Z|c�蒮Bp��IJ~�/ӷ���lt�&����WDz]
Static task
static1
Behavioral task
behavioral1
Sample
a74c1f0edc5c0a18715601a92ec96510_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a74c1f0edc5c0a18715601a92ec96510_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
a74c1f0edc5c0a18715601a92ec96510_NeikiAnalytics
-
Size
4.2MB
-
MD5
a74c1f0edc5c0a18715601a92ec96510
-
SHA1
44b483e94ae5833f3463327e9b339311952e9108
-
SHA256
61f81c33b0209b258522cdbec27322be87bffebd829751fc616bc37fa1007dd6
-
SHA512
0146a2896c3288ba33f64821448ef7a62801f3a98b4564e47224924f7af906be4c905ac120ccddeb9cc89443d50066c60161a67db9e73d7538708cf2bcbd1987
-
SSDEEP
98304:255orMho+cKMQ6y5O156QnluJEHNFIEV4jRMM:g8MShKM1yEL68NFIiq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a74c1f0edc5c0a18715601a92ec96510_NeikiAnalytics
Files
-
a74c1f0edc5c0a18715601a92ec96510_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 46KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 66KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 14.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE