Behavioral task
behavioral1
Sample
26fcabf3753a93ad7c37a5966ef83d20_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
26fcabf3753a93ad7c37a5966ef83d20_NeikiAnalytics.exe
-
Size
3.2MB
-
MD5
26fcabf3753a93ad7c37a5966ef83d20
-
SHA1
9a4e0510f084b16a9f171e0420a2ee55f0b0eb5b
-
SHA256
041bd2e51a5d22f692406056edd4308da521f9d9a8d46eb8fc2722150685dca8
-
SHA512
63edff9b5a4d6c5e1897f4d4acaf1cb58abcfd03f1be1354bafe7a7361d7aec393c3b7f457adad7c15dc4be90e4b6f1c29a76b6b6532a285c4f56af2a46cf29f
-
SSDEEP
98304:N0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc4q:NFWPClF6
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26fcabf3753a93ad7c37a5966ef83d20_NeikiAnalytics.exe
Files
-
26fcabf3753a93ad7c37a5966ef83d20_NeikiAnalytics.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE