Behavioral task
behavioral1
Sample
d9415a7c30c065ae61a67f380c63a070_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
d9415a7c30c065ae61a67f380c63a070_NeikiAnalytics
-
Size
2.4MB
-
MD5
d9415a7c30c065ae61a67f380c63a070
-
SHA1
3bfc9b28808442a598be746d5bb25f50689cb911
-
SHA256
0205beaf56838ee3892e6cd71f75b6322bf67ce3ecc90a61551f3f478a498bd1
-
SHA512
932387f4a78f444dbaa32c4e5cf73cf49d8b83323bf91c25e2a7e9278a5913e6339ffb1df29fdbb3a932f6733dde6f50e889cc7ba1102f3b5e765a4daa30c0a4
-
SSDEEP
49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzHUrG4wW3:N0GnJMOWPClFdx6e0EALKWVTffZiPAcM
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9415a7c30c065ae61a67f380c63a070_NeikiAnalytics
Files
-
d9415a7c30c065ae61a67f380c63a070_NeikiAnalytics.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE