Behavioral task
behavioral1
Sample
cedce56b3751f6025897a46253b4d350_NeikiAnalytics.exe
Resource
win7-20240508-en
General
-
Target
cedce56b3751f6025897a46253b4d350_NeikiAnalytics
-
Size
2.4MB
-
MD5
cedce56b3751f6025897a46253b4d350
-
SHA1
4c7d487e047db7d99c5618d19d735d31e6cd49d5
-
SHA256
9c079dd34908416f4cef70e62d154c2dd14f34dcd8577f3d4b163d846d2dd342
-
SHA512
423d25f1e8c47bde35e3b14b4e93dc74c1bbbe6b5fb965ea51633195b2b6c0266ed82064f696ef868458184cec3351872c2a8407aa9ecc118e670f48f66cdc4f
-
SSDEEP
49152:BezaTF8FcNkNdfE0pZ9ozt4wIQw5UPeNliw8s/E/GYsq1:BemTLkNdfE0pZrQX
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cedce56b3751f6025897a46253b4d350_NeikiAnalytics
Files
-
cedce56b3751f6025897a46253b4d350_NeikiAnalytics.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE