Behavioral task
behavioral1
Sample
26c15f5f3e4ce57fc23f9eb5b432bfb0_NeikiAnalytics.exe
Resource
win7-20240508-en
General
-
Target
26c15f5f3e4ce57fc23f9eb5b432bfb0_NeikiAnalytics.exe
-
Size
3.3MB
-
MD5
26c15f5f3e4ce57fc23f9eb5b432bfb0
-
SHA1
21be51f027fe7a2cea21c2fdc0c5fd92d21fa98a
-
SHA256
19b6e9e741554e8df250c3241cc2d13b8dfc42efd4a43d0997dcd4ba8ee7c2eb
-
SHA512
c9a4d306a8457763e75432263681e5f6efc651a62961f473ae1c961c0a39cab5a90d336469f49fadcc837ab2a2a76eb0f6f9686dd4f4439a7af6757939393175
-
SSDEEP
98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWm:SbBeSFkK
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26c15f5f3e4ce57fc23f9eb5b432bfb0_NeikiAnalytics.exe
Files
-
26c15f5f3e4ce57fc23f9eb5b432bfb0_NeikiAnalytics.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE