Behavioral task
behavioral1
Sample
508302e67217cd36eacd5ea1bcbb7280_NeikiAnalytics.exe
Resource
win7-20240220-en
General
-
Target
508302e67217cd36eacd5ea1bcbb7280_NeikiAnalytics.exe
-
Size
2.4MB
-
MD5
508302e67217cd36eacd5ea1bcbb7280
-
SHA1
6d72a25c194392e93ca6ff3d2e161040700bf405
-
SHA256
0337559cf93f37508fe325ea9cc1e55c30c9c647f402fdd9a54679a3b879e702
-
SHA512
50d0f3d0b7fa8252d412e8e9c1f7c6fcffa296cdf8977434cf28ad05ad25c3bb3049eb646f6bf153bc8671387c5cbaf5c1ac56fc5008a1d597dc2b67f6a3393c
-
SSDEEP
49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+A4VBqxGLIowx2JE:BemTLkNdfE0pZrK
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 508302e67217cd36eacd5ea1bcbb7280_NeikiAnalytics.exe
Files
-
508302e67217cd36eacd5ea1bcbb7280_NeikiAnalytics.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE