Behavioral task
behavioral1
Sample
17440f06ddc6480366f78e7618da01f0_NeikiAnalytics.exe
Resource
win7-20240508-en
General
-
Target
17440f06ddc6480366f78e7618da01f0_NeikiAnalytics
-
Size
1.8MB
-
MD5
17440f06ddc6480366f78e7618da01f0
-
SHA1
d40f3b84c11c8e86cebe96b9bb0de2b793f7006e
-
SHA256
93911f62c42c2f37cae19db8f7f2dd41a0a25469f1411ee9d19e488953fa8e67
-
SHA512
0cfae0d9c78b326ff60490d752341b381ccb7899a0fe315aa400b2c6047c057f316c0d0790f21e9183f3426443bf1ec31f0cc6d0a5085e914a0d921cb5011d86
-
SSDEEP
49152:BezaTF8FcNkNdfE0pZ9ozt4wICbbnlD5tmW:BemTLkNdfE0pZrO
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17440f06ddc6480366f78e7618da01f0_NeikiAnalytics
Files
-
17440f06ddc6480366f78e7618da01f0_NeikiAnalytics.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE