Behavioral task
behavioral1
Sample
9774eba1372a2adad8d59c97b6bffdf0_NeikiAnalytics.exe
Resource
win7-20240508-en
General
-
Target
9774eba1372a2adad8d59c97b6bffdf0_NeikiAnalytics.exe
-
Size
2.3MB
-
MD5
9774eba1372a2adad8d59c97b6bffdf0
-
SHA1
5a0b1b9bd2d55704f10cce661599af6ed9b87139
-
SHA256
9064d3a290ec241337a909ad391b8a937c2892b538542a7cfa2e416a59319583
-
SHA512
cf8a01e7263b98b4881d77992f3cf27c1cf0010ccf69ad62ec84d6ca9ecbf0bb0a76cebaa6dcdbd2fb869a2cb467977c277ad7b213d508879ed645aad3e52967
-
SSDEEP
49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+ABcYE8YKqlCd9QiuQjd:BemTLkNdfE0pZrg
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9774eba1372a2adad8d59c97b6bffdf0_NeikiAnalytics.exe
Files
-
9774eba1372a2adad8d59c97b6bffdf0_NeikiAnalytics.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE