Behavioral task
behavioral1
Sample
371d7bee913c6fc0ed9f1e1dcbc2493ac5c10aa7126c3c518f848c2ef5e02de9_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
371d7bee913c6fc0ed9f1e1dcbc2493ac5c10aa7126c3c518f848c2ef5e02de9_NeikiAnalytics
-
Size
2.3MB
-
MD5
d7f538102cf696fe415a622c54b5d800
-
SHA1
079343e6b0a18be1f8544e262f73a67ec68afabc
-
SHA256
371d7bee913c6fc0ed9f1e1dcbc2493ac5c10aa7126c3c518f848c2ef5e02de9
-
SHA512
f5eeaf4ec0d4dde7bcee4e3e82a2ea46bcae7a6ee9831b7e8b369c8196338609906e025bd92b3813ada1bb722073e9acdadfb0b006b7b7afe40f1af4678defdf
-
SSDEEP
49152:BezaTF8FcNkNdfE0pZ9ozt4wIQUUvXjVTRdf5k5p8iKCoY:BemTLkNdfE0pZrQ8
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 371d7bee913c6fc0ed9f1e1dcbc2493ac5c10aa7126c3c518f848c2ef5e02de9_NeikiAnalytics
Files
-
371d7bee913c6fc0ed9f1e1dcbc2493ac5c10aa7126c3c518f848c2ef5e02de9_NeikiAnalytics.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE