Behavioral task
behavioral1
Sample
de193742903a9aabb168e897ce77fbe0_NeikiAnalytics.exe
Resource
win7-20240508-en
General
-
Target
de193742903a9aabb168e897ce77fbe0_NeikiAnalytics.exe
-
Size
2.9MB
-
MD5
de193742903a9aabb168e897ce77fbe0
-
SHA1
f7e1dac249dd2fad6222bf768635270aac694a4f
-
SHA256
52d125ea68ae010fd62dac7cb91ca8aba287f2785018da2556ba1276ff96c15d
-
SHA512
2e423f6e8f94f10914987868b550a8a7874f82f6ab9f42d4a761ee7f83a5dae182c8a41c7789ce6933c946930571e5e96dab833f743d669d6d091084ee8a367f
-
SSDEEP
49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzcDwq6Sd0R7qV2YN:N0GnJMOWPClFdx6e0EALKWVTffZiPAcm
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de193742903a9aabb168e897ce77fbe0_NeikiAnalytics.exe
Files
-
de193742903a9aabb168e897ce77fbe0_NeikiAnalytics.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE