Behavioral task
behavioral1
Sample
47a3b1bc2bbfcc22fd341acbc6d9c4e0_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
47a3b1bc2bbfcc22fd341acbc6d9c4e0_NeikiAnalytics.exe
-
Size
2.6MB
-
MD5
47a3b1bc2bbfcc22fd341acbc6d9c4e0
-
SHA1
40ce616817f8abfb82df163b3edd48edb80d9966
-
SHA256
381efb2d1167273920fc8b90243b041dec56218441bfd466c0e61141158aa695
-
SHA512
c11a36d82d2902fe7e2ffe9655198e74d534c28e62e0e0700a8982faefe3609cf1abdb582dbcd701f20422c2c818eee01f236d02c8f1ace76370d166b3657bd8
-
SSDEEP
49152:BezaTF8FcNkNdfE0pZ9ozt4wIV56uL3pgrCEdMKPIH2BX2:BemTLkNdfE0pZrV56utgpPs
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47a3b1bc2bbfcc22fd341acbc6d9c4e0_NeikiAnalytics.exe
Files
-
47a3b1bc2bbfcc22fd341acbc6d9c4e0_NeikiAnalytics.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE