Behavioral task
behavioral1
Sample
3820a2eb7e070807063fde8ea87c0250_NeikiAnalytics.exe
Resource
win7-20240508-en
General
-
Target
3820a2eb7e070807063fde8ea87c0250_NeikiAnalytics
-
Size
2.7MB
-
MD5
3820a2eb7e070807063fde8ea87c0250
-
SHA1
d4ee6aea7b2a6acb8b450fdfa1449d5213aa83ca
-
SHA256
ef2acf1c3307a4b9f8a675e4a0f04dff9a90bbee57882d34d56abe97467034e2
-
SHA512
3e9ded4f93551bf7c7e2df2f127b01c85762fd2d406bf8b6425ad0ee4d365d9bc79aa2469c16318e4ae1d7f0567974f0bfc31486d9efb66cd30ece45aca7b360
-
SSDEEP
49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkyW10/w16clf9i:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2Rh
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3820a2eb7e070807063fde8ea87c0250_NeikiAnalytics
Files
-
3820a2eb7e070807063fde8ea87c0250_NeikiAnalytics.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE