Behavioral task
behavioral1
Sample
2591fb8be8398fdcf0b8091d52a2a5c0_NEIKI.exe
Resource
win7-20240221-en
General
-
Target
2591fb8be8398fdcf0b8091d52a2a5c0_NEIKI
-
Size
2.4MB
-
MD5
2591fb8be8398fdcf0b8091d52a2a5c0
-
SHA1
65e381cd33f642eaf0e635a7c0ecad1912d6cef9
-
SHA256
a99d99542b43631d082e676491879a37e0f6a069b6018b0a7b4ea9261943c029
-
SHA512
9a80ad062546106abe3a04a73677c43f876c49458282c1a69d13bc747ac63df3759f0728d88df8364a6f1e79df965b59d1799c12ee507bcd683c723fa7c8264e
-
SSDEEP
49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzcCbH4Xn:N0GnJMOWPClFdx6e0EALKWVTffZiPAci
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2591fb8be8398fdcf0b8091d52a2a5c0_NEIKI
Files
-
2591fb8be8398fdcf0b8091d52a2a5c0_NEIKI.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE