Behavioral task
behavioral1
Sample
c95e82d01bace3f5bcefd089f8a1d9d0_NeikiAnalytics.exe
Resource
win7-20240419-en
General
-
Target
c95e82d01bace3f5bcefd089f8a1d9d0_NeikiAnalytics
-
Size
1.8MB
-
MD5
c95e82d01bace3f5bcefd089f8a1d9d0
-
SHA1
0426196b757f50fb44aae2fecc40f0dec9a0318e
-
SHA256
6bfc8f031201463150267324a416c7cefd01e578a122528c39eeca006b2d8004
-
SHA512
ace9e28cbdd06722aba70b29bab3d7422131c3c10d371c5d516dca35177748351d7bea4248e4b8a9a41ab18b0dec282c041513c2e77af9b209897c56ead27557
-
SSDEEP
49152:BezaTF8FcNkNdfE0pZ9ozt4wISK9NcHFg:BemTLkNdfE0pZrp
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c95e82d01bace3f5bcefd089f8a1d9d0_NeikiAnalytics
Files
-
c95e82d01bace3f5bcefd089f8a1d9d0_NeikiAnalytics.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE