Behavioral task
behavioral1
Sample
8a1b6a3a4cb1d9d6ae07e8ef7f1ef7b0_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
8a1b6a3a4cb1d9d6ae07e8ef7f1ef7b0_NeikiAnalytics
-
Size
2.6MB
-
MD5
8a1b6a3a4cb1d9d6ae07e8ef7f1ef7b0
-
SHA1
96b7254075be1923cb1e8b35d55909128d684410
-
SHA256
886e07c6b14fadc8e425e63f66b3776a87f886aef4bb9bf934f9e6730bc6dee7
-
SHA512
797c615c3b1ba19a4ae232ed325c8e70609fc1d0db46a25eb2bb5181353af07f018124e69e8eaeeeb4ccf632032204f7ccc46c17763f6a3628a29701f502817d
-
SSDEEP
49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzzxTMS8Tg3avLoCD:N0GnJMOWPClFdx6e0EALKWVTffZiPAcW
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a1b6a3a4cb1d9d6ae07e8ef7f1ef7b0_NeikiAnalytics
Files
-
8a1b6a3a4cb1d9d6ae07e8ef7f1ef7b0_NeikiAnalytics.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE