Behavioral task
behavioral1
Sample
02e3644b71941c5a98f44b8f6275c400_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
02e3644b71941c5a98f44b8f6275c400_NeikiAnalytics.exe
-
Size
2.7MB
-
MD5
02e3644b71941c5a98f44b8f6275c400
-
SHA1
746f7126e0cf662b9556a589effb35b4a3ed85be
-
SHA256
634f795db4dc9bb194af7d23f1482d4d842e32884c92ce8e651de957c5e17763
-
SHA512
5aad1a0e47c9bad87563ef6046de655f703c5ffa9a93e43af6f27562fc71c7517ee0a5e0d15ded1b758c6e6e89b96988e38ec1a75ee0d977b7fe1a8547b15e8b
-
SSDEEP
49152:w0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8Dze7jcq4QXD7zWI:w0GnJMOWPClFdx6e0EALKWVTffZiPAcy
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02e3644b71941c5a98f44b8f6275c400_NeikiAnalytics.exe
Files
-
02e3644b71941c5a98f44b8f6275c400_NeikiAnalytics.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE