���H���E^��UW������P:�H���l�����K�wR���;d�[�0?�^���b��I�2<�\�P�=K����-.9�5�Q�?�_�Ǭ��U�����}k!y���Ϡ����Į&h���;kq:+��Tf~}s��/���ì}\F�K���a~�9��s����� ��C�,�>�3m�20�-���+�gXe7V�QT�C.sds�b�cMRgz��� ^�L q�%���*s��5��N�J���Z�gy��������Z��M:� �.���Gp/���2Y�ՙ����cQ� %�g�d�J�=�KdT��C3>��^l�C�5���щ �dϫӔP�3���y�O�-���.�*C]ߥC ��XE�]���Z�L~j]s�Bv�~�j��yOD>C��R/�M�0���i�SL��JP�����X��hsM�6�]bdG�!�`�`� 1c�Eٿ��R�g�V�]��"j�8z��)�eb9z_*cI��:{K&�^�~C���rE}��pk|�,��`�ݧ�����h��y� �E1S�t0���Z�;'I�3k#�Z��Nw�tDRϾ�j�1J�z�l7��C��Mv3����!�e�!���zx�kfz�.�>q��(��mAM��rJ�f��u�Vsliߩ���+�>�Ri6QK�{�����eQLAFF$C[O���=� �c�7 �.�'�i�� !�2�ğK֩ς1� ��N�t7r}LJY��ɴK+MbO�)u$�;�ͻ�4��|v��ު@�@��m������)[/D�� ��;��B� ǵbD�C4��K�[��\�zPɔ~d�V�]5���SLԺ�Zx�柣�~��f:���Jh#�6�z�ϵq�����q5<�l�ﲢ6D��K=sJv�O��i/�/�Ęb���g�aB�W�V�Y��j�n�#��h����u�k��N��zn2�1t:Tm��u,�N���`��I�+4���)6$%�#����9���sMYm�2�2��͌�V�t6���f ��g��ń�,;N+�8.0��}Pf�ۑ�{uma�r��w4�H"K0�p��zT@|L����r3��E�:�R�O��O�<��cx��K����Y���N�+�)��'��ZF ��u��U_�����?GZ�Y�3}��L�u� �K.��}`��ȀC�푏�w�62̄02E�2���n�c���IqM�[���H�7��@X�5�!��Z~�����6�Jc�v���5�u�ъ��6�&��VE¸:O����Ig_Ԥ�W/���q���T�IӨ/xT�|Q���w�3�Jx��f����B[l���p�ר?{)p���䢾B~�A������� �E����(�Ca�"�!�'�(�,���Ԟ��3l~���wʵ�� �Y�W�� ��_��Ef���l����QX�Eb6p`�h����r\��љ�"�*2��=�q��!f�v�Js�\`�o����nz�˗�ӏ�n�D�(��+��I�U.��N�ZW�Q�R��]�p�GY�\� ��Xt0l�Ѿ�*ͣ�"6� �<�(:�;�Í��.��e�q�0�La��-|��[�h�_e�� [�M&� �nW����.��+�Y�WaW�/�o������4�njr������pV`�c�a�y�f������Ë_���gJtk�z�K~H�g����ޅ�uW卾O��k��7}��Hg��zZo�%���K,> �!1�{G>63��"�V�˫�x���ت����[�.:���E����W��9]�dw5�y-�&�N�S��l/��1sM͔�D��v��u��·*�>L�f.[��$5ڔM�<�7OVl��vO��ƓF���\G�fӋ�2�R�᥍�s����*,��Qg"� ����X+A<��S�奥j�P���)ݥ��|�ce�CΏtZ:Ef��"K��̂Ha�y���)����P@�OS��!��` E9{�z�����D8���.�cC�Bzp���������A&�?a���%u |V�ԷF�T��!<'W�)�wj�k.���VAsH�0�̲n�-�7�3JƟiqx�p*C�h�#^���[���F�a}��:&���WQk8V=��]dI/�y�g 7�b�H*��#���t��n�u�'��{�}����fM��t�/F�}><��P���f�����y1�F�4#�l�=��f8�Gv�1�߆.x7���=E70S��`3)��JV�i�;��W ��Ji��<|����;`��C����E���0�����ڠ{�;,�E�w%A�G��}��T��Y��S�O3����w��$���1sB�[�U{�c�����Va��E�3�_������5�-8ʂRRm�sA ,�}8�I��2��a�@'��l,����������v�D*��E�;����L�"���D�ˊ pxՖZ �=��a4۳�_}��� u����b�Y�S�j�Z�"�ݏ&I[B�Juv�n}��`��Bx�ix��Cx)j~5-a�F��Sw��P�4�Ϣ��@g7�~�:�F�bS�*)K,�c.��w⽛/����V� ������x�RKB�fA?fb̖|c*v����YSA88�g���e"⽥Uס!�������+͈�:,RKNw��U�B,Ƭo;r�V,�%�c�Ү9[o��1�@�s��ٶ�w��S�D�����{���X�����ʥ�Ķܞ?���7 w���"Iő� J3U�K.Ri���P�m�'\�#�������>e�Wl�u|��ೕO^d�6xt�iMz9 ��K�]T5a� �~^�2:m��ѥq��6=Ȧ��::u��ɒ��:"�w�����[��|�-�z��G�po���'�� 7����7=��r���J��)�;��X�>��]�x��v�'� � �c]���K�<�':EnH_z�GP�d� q�r����2Fb�5�7�#����9��j��ۅ��g�.4�4F@4R&:�T�4��okq�Z-���D�-�?�n�~��K�>�����ʯ�Ѓ�9�V�]U��p/CkO�������\��>�W��>51ĉ�^��]A�� ڷ���:R&�9cQ]*ק�l�#N�W��x��vz��vZ���c`F�𦺕(��*&' ���}$��Ԥj��xC��ٺ��H}���Y�E��~��s�a�U�hO��W�e���NvX��F���J$�˵���R)�o�L���ל�>M ���9��-ke���}e�� ��D�|b>��`:�VL���xT�ǰc�sH�v�ϊ�q&����J�I���8Ơ��'e�²������Y�� �G��YȢ��W�������@Y�e���(��}^+����F{QG<n3��/�{G��� *_ĔD���k�Q9�� �X���L3�����d��)��h�a�R(�~�f�m��>~m��yw��lʑ4����9�F�2�L��2�5�yG� m���Z�R �!s ��R�_,ف���� D�8��w�r�u�B�\��8M�1�D�Ֆa�03m�j�x;���x��Lʶ��),����B J�t5���c�W��G���$N'�_R~!]("�;<�� V����`�V\Nkuio6g�����ȝ:
Static task
static1
Behavioral task
behavioral1
Sample
982723ffb342c613d3a268ca6e9311b0_NeikiAnalytics.exe
Resource
win7-20240508-en
General
-
Target
982723ffb342c613d3a268ca6e9311b0_NeikiAnalytics.exe
-
Size
3.1MB
-
MD5
982723ffb342c613d3a268ca6e9311b0
-
SHA1
22ac456ee78ba8747ae31d7e6299a36a32b2504c
-
SHA256
895e5ef2c2d1a596143fa3bffa8d4701e924e1a5ad936f84d3f1b9180a1be858
-
SHA512
473a10a1fe81af5c8168efa81c82c663f19fc030b2a55cf19d0ff8bb0ef2731f80f2873bcfc5743dad5e70fd3f7a3da61e44e2159177cd41a791f26a411d99cc
-
SSDEEP
98304:zYlojrDFH1QgI+ZxNlUuV2Xog6qeZJylH5PUyXR/:ziojogIsxzUuVxxqevy5S+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 982723ffb342c613d3a268ca6e9311b0_NeikiAnalytics.exe
Files
-
982723ffb342c613d3a268ca6e9311b0_NeikiAnalytics.exe.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE