Behavioral task
behavioral1
Sample
72a5648ad3a4aeda334c86a9f323b410_NeikiAnalytics.exe
Resource
win7-20240508-en
General
-
Target
72a5648ad3a4aeda334c86a9f323b410_NeikiAnalytics.exe
-
Size
2.6MB
-
MD5
72a5648ad3a4aeda334c86a9f323b410
-
SHA1
11c6079ce75999f85139b1da416820fa70da44bf
-
SHA256
6f8ae56aba18edb9787c48955d154dcfbedaa4dd6d8f520043930e99fb5b0db0
-
SHA512
4c66ff8d50a41beae02c4a67c5f096228c2c63faee76e0e285186c446e11dc0c60b4bdcef620860fd44bcbf95784e3c212404fd7793f67c9ba25e66826a5d862
-
SSDEEP
49152:BezaTF8FcNkNdfE0pZ9ozt4wIQOYilJ51subNWYyNrqzp4opL:BemTLkNdfE0pZrQO
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72a5648ad3a4aeda334c86a9f323b410_NeikiAnalytics.exe
Files
-
72a5648ad3a4aeda334c86a9f323b410_NeikiAnalytics.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE