Behavioral task
behavioral1
Sample
3e61b3df84c41d5c86c6f65da22db050_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
3e61b3df84c41d5c86c6f65da22db050_NeikiAnalytics
-
Size
2.7MB
-
MD5
3e61b3df84c41d5c86c6f65da22db050
-
SHA1
740d1f7726a293ce2de1de0055762c1515c7b264
-
SHA256
d7ffe6408aec47f0eaa3151dae9ce8fb80fb7a6e8caac15473582bb8acdb105b
-
SHA512
b863b8697d6d6674f8c69aa116a5473d70bdfcede5b90a33d0cea8ca76d2b5d5fc44d13e98e9af8bb2cee37465b2c80bd9fd1724eaa6a2d885cb5e4427311c24
-
SSDEEP
49152:BezaTF8FcNkNdfE0pZ9ozt4wICbbnlD53SUDuFEsOT:BemTLkNdfE0pZrS
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e61b3df84c41d5c86c6f65da22db050_NeikiAnalytics
Files
-
3e61b3df84c41d5c86c6f65da22db050_NeikiAnalytics.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE