Behavioral task
behavioral1
Sample
5e360b3f6ccbb8a2d3bc0b0b7c0a74aeb3d3fe609e76fb0646a8c9677f4c2dd5_NeikiAnalytics.exe
Resource
win7-20240508-en
General
-
Target
5e360b3f6ccbb8a2d3bc0b0b7c0a74aeb3d3fe609e76fb0646a8c9677f4c2dd5_NeikiAnalytics.exe
-
Size
3.1MB
-
MD5
30016c779168b9dbce55e5dbc4a117c0
-
SHA1
1933aa7b456ef27ae111576e9f0c1f72646c64af
-
SHA256
5e360b3f6ccbb8a2d3bc0b0b7c0a74aeb3d3fe609e76fb0646a8c9677f4c2dd5
-
SHA512
29ab1a40a5e552f42697b1a7c5da5362ec4f1ac894848e834e5019ee333f3967758b71a6bd9d1bca2cc8f7009304d47ab33751ae8c80842aeb4a55b88c080c3a
-
SSDEEP
98304:w0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc4P:wFWPClFf
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e360b3f6ccbb8a2d3bc0b0b7c0a74aeb3d3fe609e76fb0646a8c9677f4c2dd5_NeikiAnalytics.exe
Files
-
5e360b3f6ccbb8a2d3bc0b0b7c0a74aeb3d3fe609e76fb0646a8c9677f4c2dd5_NeikiAnalytics.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE