Behavioral task
behavioral1
Sample
5790b67f556eadb66f54c9792c74e6a0_NeikiAnalytics.exe
Resource
win7-20240508-en
General
-
Target
5790b67f556eadb66f54c9792c74e6a0_NeikiAnalytics.exe
-
Size
3.2MB
-
MD5
5790b67f556eadb66f54c9792c74e6a0
-
SHA1
8663b880b11ec8e5749350e2637129b996c4f44b
-
SHA256
3083346695104860cd482fded74853ea57c1ffbc2d062a8d4eb2abae094ae340
-
SHA512
28cdcf4e866418493a3816881d4670c5c88ef82f336bb95d2babb9c2936210b7cb04041ca6b5290d0f552dde78334ab59e3661c7ac894a6e42cc4460a8f22d99
-
SSDEEP
98304:w0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc4O:wFWPClF+
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5790b67f556eadb66f54c9792c74e6a0_NeikiAnalytics.exe
Files
-
5790b67f556eadb66f54c9792c74e6a0_NeikiAnalytics.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE