Behavioral task
behavioral1
Sample
34a3be8d97610c000dc2ba13dfe6b6c0_NeikiAnalytics.exe
Resource
win7-20240508-en
General
-
Target
34a3be8d97610c000dc2ba13dfe6b6c0_NeikiAnalytics.exe
-
Size
2.9MB
-
MD5
34a3be8d97610c000dc2ba13dfe6b6c0
-
SHA1
db274df414e9f511ce5823a2426cbbc95afbd35b
-
SHA256
4ba44a7d002c2d3ceb76682717b3fa217bf8ad45e0a31f4ecda0c8789b8d7901
-
SHA512
3446d3b134d51f194f1fa650d4fb59c39508d0e1cde122f925421affcd4413098491eb1ba24e99ef40f225cd2ebf80c86ff52dd45d0384bf4439d00845e8ae22
-
SSDEEP
49152:w0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzHUJ8Y9c+MFzO:w0GnJMOWPClFdx6e0EALKWVTffZiPAcg
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34a3be8d97610c000dc2ba13dfe6b6c0_NeikiAnalytics.exe
Files
-
34a3be8d97610c000dc2ba13dfe6b6c0_NeikiAnalytics.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE