Behavioral task
behavioral1
Sample
42c974361dec5226f03393f1c513b3c3900eebca24e7c5c104b3bcb5cf93e9ac_NeikiAnalytics.exe
Resource
win7-20240508-en
General
-
Target
42c974361dec5226f03393f1c513b3c3900eebca24e7c5c104b3bcb5cf93e9ac_NeikiAnalytics
-
Size
2.1MB
-
MD5
0925754e60a8890d0f6db4bbe6e37020
-
SHA1
dfff4477c2f2aab26efbed345614140513a940f1
-
SHA256
42c974361dec5226f03393f1c513b3c3900eebca24e7c5c104b3bcb5cf93e9ac
-
SHA512
ca683278f3f7d79c982f1afc2f36a7a8a627242aa934954f9e3ef2e43ce9e3fa3695468ba7b327d836dfbc387526f028b2d56023e0748ab4789b406416ee06b1
-
SSDEEP
49152:BezaTF8FcNkNdfE0pZ9ozt4wIQHxwxN8/a:BemTLkNdfE0pZrQm
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42c974361dec5226f03393f1c513b3c3900eebca24e7c5c104b3bcb5cf93e9ac_NeikiAnalytics
Files
-
42c974361dec5226f03393f1c513b3c3900eebca24e7c5c104b3bcb5cf93e9ac_NeikiAnalytics.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE