Behavioral task
behavioral1
Sample
a75f9958b12a2fee9ea8e06697357660_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
a75f9958b12a2fee9ea8e06697357660_NeikiAnalytics.exe
-
Size
2.2MB
-
MD5
a75f9958b12a2fee9ea8e06697357660
-
SHA1
38771e67272d1728c5d1e9c141cf2a91dc243740
-
SHA256
9b814fec363a9a851b715ae7d93b4c2e6630b829c32980d7b3948964d355eef7
-
SHA512
76b2488f0b37abec1ea867e415f2e0137835a2a2622ae95fc06df9c67fb0e8e7c11a406045117660beabe6211679fca118c894e0c0b808e7a8e43c6343edd1e1
-
SSDEEP
49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+AjES546c2dqOZu:BemTLkNdfE0pZrD
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a75f9958b12a2fee9ea8e06697357660_NeikiAnalytics.exe
Files
-
a75f9958b12a2fee9ea8e06697357660_NeikiAnalytics.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE