b-��� # "��Ī'}��:ʲ�=����ԢS�@� r���9h�g Oe�C� ���2ݣ��*�&,�j�j��$;X��S5�oE�/�ٰ^�y�n��ƌ*9s���/v����"'�2J28�������}�(��b�uZ��X�+AH���&|� ǩb�<��W���=�\E��\��f��b�w��_���7��)��ϘO��7�qE*��h��&F� �Nj 9��':�:(y�f�Ypp�kz�Mlp[?�c[��P$1�u��YQ������ק�[;<�|�����P+��e�5~AH7�`���xq���>��[���ԀL�����&A�݁+�h��u�U��S-��� ����>�=|"�Eyq'��mz`��!�F��uo8��=*��G9����%��x�f8���{��I|����$�����+��,5������$���}�Zø��%����|��M�'�?��֢DF@M�q%�:Q����:4���Ĉm���/5�1��Z�끵�#��,�H"��-�h���+´��c�n����Yl��G� �&��+�e���^g0&j_�)�\4��2���~�I �_q�&��?A�Zy�c[��/V�/�!>@|��B�b��Ц'�5w�a��%��t;�p��nS�)�ޤH ��>�"����j ���I��$� �s�b�Tw�ʊ�����B"<��\P�F��έ_z��4Z���p<v�6��������W�TS�1P!�Gt!fQ�:��MX����S�ѩ�{ c$W��hX�s||��ϝ%`���TR��� ]Iy�1ѥwcWwT�oq�Ù6H���o��q bjoG��#YfP4p�D�����,�5@`Yu۠� ې1/�E���a0+�PRt�[C0�|L�N�T��.4���L+��-�)���۸�M7`Nxd�H����"��(+ye���Ʀ�Q���4����-qb�{��e�0"�������b�N%�c�*�(?�Vw�{��oat�9�V�E1� ���6�6"�T��VlN�Z��+}�Q�p� y;6���#��x��- R�jZ�6<9�b�����k��*sY�8�6`�xY��AS���7\]�&g�$V�kq���D�l[�;��U���0��26�e���ތ!:=����Tp�Vix�L��$��i�`7K��0�(*8��Y<�!�9Z�c���� �k��dYqm���Fѧ�*��ǝ3�����/#� f�,m�LI�{PE���^9oE�J,=�"8�J>��B�3zE��C����R��8pd�Fs���a�&+�p��=h��J�ʶ�ڭG��M�4?'���VC�z�$;0d�����gX�N��)�����A�9ӷ���H���y>3�h7��<�g#��'NLh��9���h������SmZt�52w���R�Kz��(�n�$@4�V����ˌ���#+Z�y��.30X��x�&g�%B@����(#�Ұ�����O�5AҮ�NίE8�oa�VU۱ѵf-V�^�:�h"��k9⍖:���U`�U'���?�.�蟜+I������j�.e���u����Ʈg�j���$]�K���[ o���5�czުD��~�'��b�'�*~�K� ��Clw��<�]u�#N���+v��&:����� G9m�(ˢ<r������wR�D�ʉG����⧍v��%.Z��QsDm|}�3�,D������H>��ԍjh��������X@�j;�+�6��e����^�)��v��.(C-W�j����Rs_�v�J� ����W���)�T��#��E)i魍=�kñ�������kF���� Q��D����}L~��Ǯ�ݶ�Xd5���]�U�k@ϡ䶔�R ��!�+���k������8����EM@��p�u�bߔ8/Uuڭb��bmpG-��n�:�f�[��6LM���\��ц�J��)D?v�� [#�t�#��n���Ş��ȯ���MA�G��8SN̷���[|���qx��ƎZ�Q��b<V��5DD7����ݎ��H�Ǐc\ ��E�u&5���_���?�L�|��KIuzL���IP�Ae����������b9ū��"�L2{�o�)���9��S</�������4��3H�I�Q��[��O7i�����^���0P�C~����Sp�t�=��R�E0���xN��Z����ay���X�5D����D���ߙ���� �2��,R�����9�AU&�{������r�ʒ�amB����R��N|xr�:s�}�]E�����P,+�դ�IaW�� ��J~j7B�1�T n���E�e\��{Z�T�������K��5�8�T�{���o'��\O�,_e���+z�g����W�R+c����'S��Q�أ=]���k1����bK��?�6���$;�yU^1�`��%�гk�O��|�;L4�w�*on�\����P��2� dh�R��x����y�me �=Xs��A��Ӻ���5��{%$$��1�#��Aa}�O�ؽ�P�/�����^�Sw#||U��(?�A�8��#�N�M�!<� ��!7��6��,����ixt�&b��6q;Y�.V�]w��Zޞ��Ra@w���< H�2���蒭Ě��W�l�Ԃ�7�`��������uz<1�W�9��d+*T�uӨ���A����c���R+�>Oג�Q��aJ �)�L6�q���,M-�<���~�C����W|v~�?��aD�o�rCX $RWY��n��9���UE(ā��2���Un��mW�I��M�\�︸��[Mei��7�=�U�n��3|A�Iڑ��-��-pY_��}@��=SVj��5H���RH � ��hD�iz���� >�U|e��ʌb�dWp �-ϵV9{#M.*����G��������Ղ/k��$ w���DrKX͖ˌL�e�4�����`M��B��Z��-Tr�9>�#zKF����v��V�<a�Ι�.���Χ=2����~A�B�����g:����hs����RO�&{Ȭ~}[w�<��������^��v�"����?�A�jR��S5�YM3y�ͬb<Vn��H��<��Y�
Static task
static1
Behavioral task
behavioral1
Sample
f0c2f35d8fcb18241d3c47baa7c27b10_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f0c2f35d8fcb18241d3c47baa7c27b10_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
f0c2f35d8fcb18241d3c47baa7c27b10_NeikiAnalytics.exe
-
Size
3.3MB
-
MD5
f0c2f35d8fcb18241d3c47baa7c27b10
-
SHA1
b8fe68de68a1b071163f0b699d4fa906e9793eba
-
SHA256
2dffa391b825704f5847d2c317c2059e1ec379d8af1162b63e3415dfd6f6a9f7
-
SHA512
fe99ac026d544b4b4bdb740201bbb9025d8b594c4735ea16a7d13800bf1dfba5561b1216df47ed42ceedea8c067845d3a94c34a391c3a2ed7d0d56d51153a48a
-
SSDEEP
49152:FYvwkRT0dPWjyKRNo2mz7+4WH7Oob/+YSistaicjg+UCqoS1b7BuY4fVW:1kRM+Z27+RH7Bb/+bgiQgJP1fwFVW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0c2f35d8fcb18241d3c47baa7c27b10_NeikiAnalytics.exe
Files
-
f0c2f35d8fcb18241d3c47baa7c27b10_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 11KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 22KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE