Behavioral task
behavioral1
Sample
536258f4e8dc5dc13079a2e5f821cd00_NeikiAnalytics.exe
Resource
win7-20231129-en
General
-
Target
536258f4e8dc5dc13079a2e5f821cd00_NeikiAnalytics
-
Size
2.1MB
-
MD5
536258f4e8dc5dc13079a2e5f821cd00
-
SHA1
f333b219c1607db9fae8c3cfc16f402058830805
-
SHA256
d06a43252531d4e6f7b1e22c6a6519e5f31f9a5fc555537bd98f19de0752f4f7
-
SHA512
2cb8fa09cc7a2db4aef3918fde5e6e5f9e45e676aff6211660b0c7e5ff31ba42984e8b59f8767b2239c71ccc26c8cbf86fdbe438d7aee6f312bbbddf3659b192
-
SSDEEP
49152:BezaTF8FcNkNdfE0pZ9ozt4wIXGv4rzq6c2HA63RX:BemTLkNdfE0pZrj
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 536258f4e8dc5dc13079a2e5f821cd00_NeikiAnalytics
Files
-
536258f4e8dc5dc13079a2e5f821cd00_NeikiAnalytics.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE