Behavioral task
behavioral1
Sample
186c388e815b62bdebb0f3a5f4690d70_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
186c388e815b62bdebb0f3a5f4690d70_NeikiAnalytics.exe
-
Size
2.1MB
-
MD5
186c388e815b62bdebb0f3a5f4690d70
-
SHA1
135aabe05bfd3c40bf1a803b7c1dad9853d853cb
-
SHA256
3e458cceb11674f74c8e592a6c1d46c6b6f1b7974afd03b60858f75c3197edb4
-
SHA512
be6508d52e1a68568986dd8f46fb53dcc38ba3036d2e7a20f7db5e89676dd4ca6314db30335594649b5d84a6be821a9e00118528f4cc8601fa344500e8c825fd
-
SSDEEP
49152:oezaTF8FcNkNdfE0pZ9ozt4wIXGvAnCumLa:oemTLkNdfE0pZrN
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 186c388e815b62bdebb0f3a5f4690d70_NeikiAnalytics.exe
Files
-
186c388e815b62bdebb0f3a5f4690d70_NeikiAnalytics.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE