Behavioral task
behavioral1
Sample
4d04273b652c33dd9f7f78e70d0994c0_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
4d04273b652c33dd9f7f78e70d0994c0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
4d04273b652c33dd9f7f78e70d0994c0_NeikiAnalytics.exe
-
Size
2.9MB
-
MD5
4d04273b652c33dd9f7f78e70d0994c0
-
SHA1
02f17a4f0044d50a3023974c8268858b2b6bd0e7
-
SHA256
4a3a1af048606ae2a17278f58ac4d7266c7239e710646ebbea5bf1649f5152ca
-
SHA512
6434e18da81626d68e684b8f5b9629a82384e8dc7bf9a5d605f753f910b000a5ccf0a992d0f48faf794a58d78922d4ba11aacb5cc8d7ef01b5af9b6794df3f17
-
SSDEEP
49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkHC0I6Gz3N1pHPq:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2Rm
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d04273b652c33dd9f7f78e70d0994c0_NeikiAnalytics.exe
Files
-
4d04273b652c33dd9f7f78e70d0994c0_NeikiAnalytics.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE