Behavioral task
behavioral1
Sample
a0733a954660a90ff9d67ebd6c6b4600_NeikiAnalytics.exe
Resource
win7-20240508-en
General
-
Target
a0733a954660a90ff9d67ebd6c6b4600_NeikiAnalytics
-
Size
3.0MB
-
MD5
a0733a954660a90ff9d67ebd6c6b4600
-
SHA1
d09ef7ab98c1b0a071f419f72b8538889181291a
-
SHA256
79237128ba076f73cdd37bab82d6310777b425f111fd8a68b3e61b95e52dcb14
-
SHA512
3fb19a1ea9d2b6ea08d3de3342adb57b8497eee1e5b753c3d66a1f0e52b602619560cb57062fd5a0412c78279f9ee436e3ac0b8329f3d8ca428460b59424902b
-
SSDEEP
49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzHUJ8Y9c87MehR:N0GnJMOWPClFdx6e0EALKWVTffZiPAcK
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0733a954660a90ff9d67ebd6c6b4600_NeikiAnalytics
Files
-
a0733a954660a90ff9d67ebd6c6b4600_NeikiAnalytics.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE