Behavioral task
behavioral1
Sample
dc723fe345aa5a5e188f410507bbb690_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
dc723fe345aa5a5e188f410507bbb690_NeikiAnalytics
-
Size
2.8MB
-
MD5
dc723fe345aa5a5e188f410507bbb690
-
SHA1
1bb83ab977e36080f67ecd35fadc7b73a563641f
-
SHA256
cd7e0767abffd218133852c859d7db09e2af967d02fbb80313b3a0c61c6ef32a
-
SHA512
f72287cd071e38e5021afeed01c8f34c92cb70887fe22838e7aba8a2e3af9a78004b35ec62215324cf4e6cf33defae728a124580b1233c884c2f8f939e5b454c
-
SSDEEP
49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzJuJUJGFQfKErft4:N0GnJMOWPClFdx6e0EALKWVTffZiPAcW
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc723fe345aa5a5e188f410507bbb690_NeikiAnalytics
Files
-
dc723fe345aa5a5e188f410507bbb690_NeikiAnalytics.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE