Behavioral task
behavioral1
Sample
01976d9c7d503cf816f5cf202df84270_NeikiAnalytics.exe
Resource
win7-20240508-en
General
-
Target
01976d9c7d503cf816f5cf202df84270_NeikiAnalytics
-
Size
2.1MB
-
MD5
01976d9c7d503cf816f5cf202df84270
-
SHA1
64ab9b040119d6e6120b8f513aebf6fd68a60f77
-
SHA256
17cb9db9dd9f1ddacb6bff3b4e85c77c8f948160b03caa41f47f53e53f68d45c
-
SHA512
065c3409853fe6761670bd27f5fd79cf133955c487a5aae1bfd74cf2ece0723a00430e0093db85c2991b62507086a71b2effc26a058a8a53df6fbc5428a16b48
-
SSDEEP
49152:BezaTF8FcNkNdfE0pZ9ozt4wIlUNFMgxc2uhCUy8+Z3:BemTLkNdfE0pZrW
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01976d9c7d503cf816f5cf202df84270_NeikiAnalytics
Files
-
01976d9c7d503cf816f5cf202df84270_NeikiAnalytics.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE