Behavioral task
behavioral1
Sample
cfb3be3172a692030fbe231cb0bfeae0_NeikiAnalytics.exe
Resource
win7-20240220-en
General
-
Target
cfb3be3172a692030fbe231cb0bfeae0_NeikiAnalytics
-
Size
2.9MB
-
MD5
cfb3be3172a692030fbe231cb0bfeae0
-
SHA1
2211742c765855fa355d771f1efd5e957c1a02b0
-
SHA256
a16667928827fb9446e3b9cdd43c3dfd1894a4b3813e681abcb9f1c0ba7c1131
-
SHA512
ac802396df614d12d133b6d2440aac6eb0714c31559902087ea13c78c84b1c3290c1fcedbc4d95636653a5618dcab0e80c6bf50262e932c24785d00fe1216337
-
SSDEEP
49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkivwSbaMYPcyO8M:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2RJ
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfb3be3172a692030fbe231cb0bfeae0_NeikiAnalytics
Files
-
cfb3be3172a692030fbe231cb0bfeae0_NeikiAnalytics.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE