Behavioral task
behavioral1
Sample
3b803c83273c8165fa3a7a037f731db0_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
3b803c83273c8165fa3a7a037f731db0_NeikiAnalytics
-
Size
2.9MB
-
MD5
3b803c83273c8165fa3a7a037f731db0
-
SHA1
051e2078f0fb1ba4b82f9d2867892724b4b889fd
-
SHA256
47ad8845b3fae513e3d7275009a5f0fd01709b06e4e09fcd0d52860e14bcc333
-
SHA512
c9168f419e8fac5e6f566cb839e97b47205fffbeb91dfc1304f5e1da417487da1fac7749dd1ca0c2faba617818d739baeac6a91c384f5981387c9c771f1c6027
-
SSDEEP
49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkFfdk2a2yKmELt:71ONtyBeSFkXV1etEKLlWUTOfeiRA2RU
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b803c83273c8165fa3a7a037f731db0_NeikiAnalytics
Files
-
3b803c83273c8165fa3a7a037f731db0_NeikiAnalytics.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE