Behavioral task
behavioral1
Sample
4191045c1735e2c96a517f2c4cfbbaf0_NeikiAnalytics.exe
Resource
win7-20240215-en
General
-
Target
4191045c1735e2c96a517f2c4cfbbaf0_NeikiAnalytics
-
Size
1.6MB
-
MD5
4191045c1735e2c96a517f2c4cfbbaf0
-
SHA1
a157ec7e339d22e2c087fa441e2666d5d46ab298
-
SHA256
16f10166be9c052b11f2f5907322041f34e477cfde0038f334f95bcc6185cec1
-
SHA512
f712b75631c8b4e7da31b43a4ae6162ed3d8d5807615b6d686b2c29824ba1b0d5ea04c8941a7b95f81551a44922b6d8c1e53cddd1eece4f78d6b49a13ec05ebe
-
SSDEEP
49152:BezaTF8FcNkNdfE0pZ9ozt4wICbbnlD5v:BemTLkNdfE0pZro
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4191045c1735e2c96a517f2c4cfbbaf0_NeikiAnalytics
Files
-
4191045c1735e2c96a517f2c4cfbbaf0_NeikiAnalytics.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE