Behavioral task
behavioral1
Sample
5b64c63ff33e878b6d9c9e5406a778d0_NeikiAnalytics.exe
Resource
win7-20240508-en
General
-
Target
5b64c63ff33e878b6d9c9e5406a778d0_NeikiAnalytics.exe
-
Size
2.4MB
-
MD5
5b64c63ff33e878b6d9c9e5406a778d0
-
SHA1
1c3474698838e35aff7c0eff52d6663f6ad6c0fc
-
SHA256
4fff198b54ca603f880d94ea67b100d41fb39f881089404c8acb282cfd51054a
-
SHA512
74d41e06eb663e1597d01c0a39a3e09de188def4137f2f4be7298ac4d3aadefc9e8f65af654d19e0403dece2e7bf8f6d0201b3cbc2468f1efc75e8469b7f304c
-
SSDEEP
49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8Dze7jcq4p97:N0GnJMOWPClFdx6e0EALKWVTffZiPAcZ
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b64c63ff33e878b6d9c9e5406a778d0_NeikiAnalytics.exe
Files
-
5b64c63ff33e878b6d9c9e5406a778d0_NeikiAnalytics.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE