Behavioral task
behavioral1
Sample
4ddd3a358d256b9bd2834eef43e76300_NeikiAnalytics.exe
Resource
win7-20240419-en
General
-
Target
4ddd3a358d256b9bd2834eef43e76300_NeikiAnalytics
-
Size
2.7MB
-
MD5
4ddd3a358d256b9bd2834eef43e76300
-
SHA1
e5534d7fabadca8d899459676fec0756054ad07f
-
SHA256
a42e8fe9dfeb541a8c1bf19b8fa09cd26aa622f10a85cb265722b7a77e2dd73e
-
SHA512
026eac2f5a1b98de874e808e66c9ba7d32e3b8e82041f8342dd84fdd1495bfcb63aa4b732869a59093a8618d27f7d904fb348f30acadb13de0f970a0499f9d5a
-
SSDEEP
49152:BezaTF8FcNkNdfE0pZ9ozt4wIV56uL3pgrCEd2hXnngk0c2/Zly9:BemTLkNdfE0pZrV56utgg
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ddd3a358d256b9bd2834eef43e76300_NeikiAnalytics
Files
-
4ddd3a358d256b9bd2834eef43e76300_NeikiAnalytics.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE