Behavioral task
behavioral1
Sample
464187e1bdd0f66aa3b37221fb308f80_NeikiAnalytics.exe
Resource
win7-20240215-en
General
-
Target
464187e1bdd0f66aa3b37221fb308f80_NeikiAnalytics
-
Size
2.1MB
-
MD5
464187e1bdd0f66aa3b37221fb308f80
-
SHA1
02fe8bb7fe66ab760d111ea914a745f284516315
-
SHA256
1aa9452848ad62e2de08b30570117172bef59f60938e4a9c4d6baa5d5326b523
-
SHA512
5af7473dfbd3ed99af32479d886e057ef5c6f08ff3a0f8d245dd7892ae5a6b65cf6c66f9384fa98efdeb06e533508a5006649632eec69ef7e9943f1d080e85c4
-
SSDEEP
49152:BezaTF8FcNkNdfE0pZ9ozt4wIlfBWFUpIO2hOVUH3:BemTLkNdfE0pZre
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 464187e1bdd0f66aa3b37221fb308f80_NeikiAnalytics
Files
-
464187e1bdd0f66aa3b37221fb308f80_NeikiAnalytics.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE