Behavioral task
behavioral1
Sample
16f38397c9fd37ff6e1f9c5bbf4d92c0_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
16f38397c9fd37ff6e1f9c5bbf4d92c0_NeikiAnalytics.exe
-
Size
2.2MB
-
MD5
16f38397c9fd37ff6e1f9c5bbf4d92c0
-
SHA1
920acb2cd99b8898599ad14437ade4502855a7a0
-
SHA256
bfa32915194a307af99fed80fc0e2c16c0c7f5f370507310b98794cd2697b273
-
SHA512
d8907912d7e057cd6536654cca13ef42174871de5335dec2c3c443f977971082333fed717f5a548fb3838d874e1cec8e2ebe6e90b84e8466f70b3f635f09b7c6
-
SSDEEP
49152:BezaTF8FcNkNdfE0pZ9ozt4wIV56uL3pgrCEdM/QxtgWUbST1v:BemTLkNdfE0pZrV56utgf
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16f38397c9fd37ff6e1f9c5bbf4d92c0_NeikiAnalytics.exe
Files
-
16f38397c9fd37ff6e1f9c5bbf4d92c0_NeikiAnalytics.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE