Behavioral task
behavioral1
Sample
a572fc60f93d29fea58f320b44a7a830_NeikiAnalytics.exe
Resource
win7-20240508-en
General
-
Target
a572fc60f93d29fea58f320b44a7a830_NeikiAnalytics.exe
-
Size
1.8MB
-
MD5
a572fc60f93d29fea58f320b44a7a830
-
SHA1
ba135051d4ad78404244255e4a1e8017b46fed47
-
SHA256
1868bf3ec4aa56b488caa133795fb1a04d054373c7e688231ef793d621277e47
-
SHA512
133ef9687895ea02cd490bbbb6393062a2ca4fb640da5c7f65b171f8920d54cce78d9ec1b5b88642fdc4536edf28644f56389800781e000b1c74ac5789df46c2
-
SSDEEP
49152:oezaTF8FcNkNdfE0pZ9ozt4wICbbnlD5E9V:oemTLkNdfE0pZrN
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a572fc60f93d29fea58f320b44a7a830_NeikiAnalytics.exe
Files
-
a572fc60f93d29fea58f320b44a7a830_NeikiAnalytics.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE