Behavioral task
behavioral1
Sample
53463b0ed862b29936adb7333efca82bcf9fdcf110bd62f0d1c514938cfcfe29_NeikiAnalytics.exe
Resource
win7-20240611-en
General
-
Target
53463b0ed862b29936adb7333efca82bcf9fdcf110bd62f0d1c514938cfcfe29_NeikiAnalytics.exe
-
Size
2.5MB
-
MD5
d5f21b27558370ab69211f6611bdab20
-
SHA1
f936b88c3b1a6143bd8110943c1713da0d7a8fe6
-
SHA256
53463b0ed862b29936adb7333efca82bcf9fdcf110bd62f0d1c514938cfcfe29
-
SHA512
2898ba1125c58b0276dbcb8f10f31bf390c08a27a8474c7503da286880b9715d4129d00aa795204d3c31dd901ecf03cc0453c2e2818f7556029956d30ec32d84
-
SSDEEP
49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+ABcYHM0NaLL1DUY:BemTLkNdfE0pZrl
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 53463b0ed862b29936adb7333efca82bcf9fdcf110bd62f0d1c514938cfcfe29_NeikiAnalytics.exe
Files
-
53463b0ed862b29936adb7333efca82bcf9fdcf110bd62f0d1c514938cfcfe29_NeikiAnalytics.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 724KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE