Behavioral task
behavioral1
Sample
6a06f04ba96285a59902e3c18eb678d41f334c8832be3dc19db45c0e38940295_NeikiAnalytics.exe
Resource
win7-20240611-en
General
-
Target
6a06f04ba96285a59902e3c18eb678d41f334c8832be3dc19db45c0e38940295_NeikiAnalytics.exe
-
Size
2.9MB
-
MD5
b715ba1cefaecedd5a7679957484ca00
-
SHA1
105cd1dfd6bce914d9aef929ca09113f4fe928aa
-
SHA256
6a06f04ba96285a59902e3c18eb678d41f334c8832be3dc19db45c0e38940295
-
SHA512
8eb51359323a9fde41ce45effde9ec56b79b83b24f13634e8998a5a6356ef1dbd62ac86cb729da360eb6ec4ecc2ed0737a48d9bd4d3c4353d349c77886afd105
-
SSDEEP
49152:w0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8Dze7jcquVoVJjDNOK:w0GnJMOWPClFdx6e0EALKWVTffZiPAcW
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a06f04ba96285a59902e3c18eb678d41f334c8832be3dc19db45c0e38940295_NeikiAnalytics.exe
Files
-
6a06f04ba96285a59902e3c18eb678d41f334c8832be3dc19db45c0e38940295_NeikiAnalytics.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE