Behavioral task
behavioral1
Sample
b7336fcc32c8e59346f2e7d209cc3c00_NEIKI.exe
Resource
win7-20240215-en
General
-
Target
b7336fcc32c8e59346f2e7d209cc3c00_NEIKI
-
Size
2.3MB
-
MD5
b7336fcc32c8e59346f2e7d209cc3c00
-
SHA1
a0cb61675c679feb5f3dfa390de0353d2fe25b71
-
SHA256
a1a52c74f7a5d3d52ac7aa29c6776824176c1fcbd108b183720d3354f3c9f0b0
-
SHA512
4d0abc46f776f081ff6470b247d83ddf3b005796c2b7d2df1e7531e557be9a53a19b3bd8d8b492741d419c7ac12475112651b4e08fbde26ca5b91793ffd66d55
-
SSDEEP
49152:BezaTF8FcNkNdfE0pZ9ozt4wIQUUvXjVTXptRmKWXkO1t7D+J:BemTLkNdfE0pZrQH
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7336fcc32c8e59346f2e7d209cc3c00_NEIKI
Files
-
b7336fcc32c8e59346f2e7d209cc3c00_NEIKI.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE