Behavioral task
behavioral1
Sample
93d6150570321f9aee2f39f9a5c51810_NeikiAnalytics.exe
Resource
win7-20231129-en
General
-
Target
93d6150570321f9aee2f39f9a5c51810_NeikiAnalytics
-
Size
2.7MB
-
MD5
93d6150570321f9aee2f39f9a5c51810
-
SHA1
fd964d8478e74521ca76958a7d6dd0ed0384b8cd
-
SHA256
21ab1a879af76674cc8579ddecfe0e5d4c453a9c7127c8b366a57f08cd0c4adf
-
SHA512
a0055822d93727c890281e500e709de93caacb7453e805bda472e2379117634547c86f28129f0428c520b0acddedd0afbf0ac7a1ddc7325d20e99845577143a2
-
SSDEEP
49152:BezaTF8FcNkNdfE0pZ9ozt4wIlMmSdIc1lNpEdxAggHE4:BemTLkNdfE0pZr6
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 93d6150570321f9aee2f39f9a5c51810_NeikiAnalytics
Files
-
93d6150570321f9aee2f39f9a5c51810_NeikiAnalytics.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE