Behavioral task
behavioral1
Sample
1a6cf0b104b9b2816a46660f20ecb18f9912b16cc2c53f31caea402b43480d1d_NeikiAnalytics.exe
Resource
win7-20240611-en
General
-
Target
1a6cf0b104b9b2816a46660f20ecb18f9912b16cc2c53f31caea402b43480d1d_NeikiAnalytics.exe
-
Size
2.0MB
-
MD5
b3da47a725a7af580d11dec4b23214d0
-
SHA1
4aa869f92f6e40f1423611cf7fdf40f64ec7fcaa
-
SHA256
1a6cf0b104b9b2816a46660f20ecb18f9912b16cc2c53f31caea402b43480d1d
-
SHA512
2fd6d7769736f6ba6777b635f9496df63bcec246df3c97c4cab9c1f0f65e6d9a0964d8cc94b662d480fe8767f05d3ed57e7583b60f1ec58114a38bddcb105699
-
SSDEEP
49152:BezaTF8FcNkNdfE0pZ9ozt4wIXIZbINXe6GcF6/iNg:BemTLkNdfE0pZro
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a6cf0b104b9b2816a46660f20ecb18f9912b16cc2c53f31caea402b43480d1d_NeikiAnalytics.exe
Files
-
1a6cf0b104b9b2816a46660f20ecb18f9912b16cc2c53f31caea402b43480d1d_NeikiAnalytics.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE