Behavioral task
behavioral1
Sample
5f63119912b742e26a45ede57e039380_NeikiAnalytics.exe
Resource
win7-20240508-en
General
-
Target
5f63119912b742e26a45ede57e039380_NeikiAnalytics.exe
-
Size
1.9MB
-
MD5
5f63119912b742e26a45ede57e039380
-
SHA1
1d77f887cb18361467638638994dcb93e67d7577
-
SHA256
4e87a72b1603bd1fd172429338170449b82c5161f9bc842c816808d17deff793
-
SHA512
3ae6886d00fe61879e7e88c36c158b4cfa5b2e6e8af213ac12493119bca57ec01a7b898c317b40ec6caf6a220730d09cd2170c5381f14d57f377efd01e4a7dab
-
SSDEEP
24576:BezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbEwlKjpv3OBC6y90Xli7V3kPitbZ:BezaTF8FcNkNdfE0pZ9ozt4wISK9NcHE
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f63119912b742e26a45ede57e039380_NeikiAnalytics.exe
Files
-
5f63119912b742e26a45ede57e039380_NeikiAnalytics.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE