Behavioral task
behavioral1
Sample
04545096e0e119c117eb59b0b3910330_NeikiAnalytics.exe
Resource
win7-20240215-en
General
-
Target
04545096e0e119c117eb59b0b3910330_NeikiAnalytics.exe
-
Size
2.9MB
-
MD5
04545096e0e119c117eb59b0b3910330
-
SHA1
02487625e400cd8e00c5129bcaeceaa5d4dd0a46
-
SHA256
e2d2aa3651a1ac8edd371f61eecf863cd6baa0c41adcae5ab58e75289a81ecca
-
SHA512
77f7ae9ea00a1c73d8ece0c22d9df6795148be1449bef22d985fe2b628a29feb402409f1686c148e55645f0d67bcedd9c21bb44feaaa9ae5e95b58f4dde25573
-
SSDEEP
49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hjGhql0lQGQK5BKrn:71ONtyBeSFkXV1etEKLlWUTOfeiRA2RQ
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04545096e0e119c117eb59b0b3910330_NeikiAnalytics.exe
Files
-
04545096e0e119c117eb59b0b3910330_NeikiAnalytics.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE