Behavioral task
behavioral1
Sample
de3461e960798787284ee5809d049950_NeikiAnalytics.exe
Resource
win7-20240215-en
General
-
Target
de3461e960798787284ee5809d049950_NeikiAnalytics.exe
-
Size
1.9MB
-
MD5
de3461e960798787284ee5809d049950
-
SHA1
0cf015023b2fb6de7a5dd4a7871de30e99ea3b30
-
SHA256
777a455a1467ac16fb9cd1bcf8395bdf6850e51bde5201233853ff279b2bdcd4
-
SHA512
fa2b6e03ac8b0c78f9278631dd595bc4aed5e8fbb04f46ad1b2f995a481e0bf9471d720df08d9d10947e282451b61e3cab174e11e9e10766762863edc97c025a
-
SSDEEP
49152:oezaTF8FcNkNdfE0pZ9ozt4wIQW/zFdDlhUKL5/:oemTLkNdfE0pZrQW
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de3461e960798787284ee5809d049950_NeikiAnalytics.exe
Files
-
de3461e960798787284ee5809d049950_NeikiAnalytics.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE