Behavioral task
behavioral1
Sample
ceda18168c4b7fc6f396a145b6ab6580_NeikiAnalytics.exe
Resource
win7-20231129-en
General
-
Target
ceda18168c4b7fc6f396a145b6ab6580_NeikiAnalytics
-
Size
2.9MB
-
MD5
ceda18168c4b7fc6f396a145b6ab6580
-
SHA1
55b829bbd847d571c729846fec58d91d5cae7b6f
-
SHA256
2c139483e5e0916eac4f5291f6eff9a696ef674642d83d0568b097e8118f456d
-
SHA512
f1b7a8dfd77cc8328548d9be62db92dfce1b869f92687e024cf3463ec6dcd358c6a0e7a9848120bf9469e0d484a04341794b3ac48257b6cc948d080fb925acf2
-
SSDEEP
49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzHUrGiMtiIraJj:N0GnJMOWPClFdx6e0EALKWVTffZiPAcY
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ceda18168c4b7fc6f396a145b6ab6580_NeikiAnalytics
Files
-
ceda18168c4b7fc6f396a145b6ab6580_NeikiAnalytics.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE