Behavioral task
behavioral1
Sample
2113ba0500c006a0699e945e151c3260_NeikiAnalytics.exe
Resource
win7-20240220-en
General
-
Target
2113ba0500c006a0699e945e151c3260_NeikiAnalytics.exe
-
Size
2.9MB
-
MD5
2113ba0500c006a0699e945e151c3260
-
SHA1
68dac47033be39fd0d32aa70f4c93c340a883f3c
-
SHA256
8ad9f3d653a25d0e6b7fde2e24a1cbba8d119e8280786a812f18517e6684541e
-
SHA512
62eb969c9b2843b513354877fef2c4c856b9f87a2aa6ae5da59619cd91536cdbafc367869354b797135b809ad4520786d80fd1a54c99b02522d225beda40675d
-
SSDEEP
49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8Dz05aIwC+AUBsWsXg:N0GnJMOWPClFdx6e0EALKWVTffZiPAc3
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2113ba0500c006a0699e945e151c3260_NeikiAnalytics.exe
Files
-
2113ba0500c006a0699e945e151c3260_NeikiAnalytics.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE