Behavioral task
behavioral1
Sample
271d76da157bf1fcfb62b453d5b01330_NeikiAnalytics.exe
Resource
win7-20240419-en
General
-
Target
271d76da157bf1fcfb62b453d5b01330_NeikiAnalytics.exe
-
Size
2.2MB
-
MD5
271d76da157bf1fcfb62b453d5b01330
-
SHA1
41757373c9d4747e38cc0cfaa6af00caea8d8ef1
-
SHA256
0c750750b5154bcd1017086eef8f243bddb9465c5848f00c92bf286d5509dcea
-
SHA512
c3ad34e1ec344b63b05a938259e4e71af9aa83118d7f9da9e99de26ea666a6958d239fc10077f5204f8542ded56c01a0c812a40918b669f5a513d977fa41477b
-
SSDEEP
49152:BezaTF8FcNkNdfE0pZ9ozt4wIQwNUMuikLCiJCF+QVf:BemTLkNdfE0pZrQA
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 271d76da157bf1fcfb62b453d5b01330_NeikiAnalytics.exe
Files
-
271d76da157bf1fcfb62b453d5b01330_NeikiAnalytics.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE