Behavioral task
behavioral1
Sample
63f1297a755fdcc80ec4327acdda7560_NeikiAnalytics.exe
Resource
win7-20240508-en
General
-
Target
63f1297a755fdcc80ec4327acdda7560_NeikiAnalytics
-
Size
2.2MB
-
MD5
63f1297a755fdcc80ec4327acdda7560
-
SHA1
2a5455bd895e59e5a23f07de7c0115060eaddc96
-
SHA256
819392ab6e6af3b15a74a128a9e0b1b75510728b2ea61e46635c39ae75048f58
-
SHA512
b4323d0a92a905a6d85c2d70751f182ab6624aa6cc8f0407ba60a8d11980d649bf413053870b6144c41d8fb90734bb4b051eae47fec2c490230987f865fed175
-
SSDEEP
49152:BezaTF8FcNkNdfE0pZ9ozt4wIQOYilJ51subNWYyxVyY/7:BemTLkNdfE0pZrQh
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63f1297a755fdcc80ec4327acdda7560_NeikiAnalytics
Files
-
63f1297a755fdcc80ec4327acdda7560_NeikiAnalytics.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE