Behavioral task
behavioral1
Sample
4fe709263def2c5d2b4ef6dbb9357b20_NeikiAnalytics.exe
Resource
win7-20240215-en
General
-
Target
4fe709263def2c5d2b4ef6dbb9357b20_NeikiAnalytics.exe
-
Size
2.2MB
-
MD5
4fe709263def2c5d2b4ef6dbb9357b20
-
SHA1
9dac5a5fecd1020d585a8f7aa732b852937a135e
-
SHA256
315b92da76697bbaae2e360215ad01c871745d3b7e30c41d7499d1e095c5122d
-
SHA512
0f45e64de0a1e4133a51b8c7c5287c4e028f8310b9476a0f7616d1273a965e00c90600353089e56a01b82b4602da62981a4003ec602278a07ef1680e0fd2d4ce
-
SSDEEP
49152:BezaTF8FcNkNdfE0pZ9ozt4wIQOY2UrwHjz:BemTLkNdfE0pZrQ2
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4fe709263def2c5d2b4ef6dbb9357b20_NeikiAnalytics.exe
Files
-
4fe709263def2c5d2b4ef6dbb9357b20_NeikiAnalytics.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE