Behavioral task
behavioral1
Sample
8ed335347ca82e0ad62b162a8abc7dfdbff6455d9b4ca6ff283624bb3359b2f9_NeikiAnalytics.exe
Resource
win7-20240611-en
General
-
Target
8ed335347ca82e0ad62b162a8abc7dfdbff6455d9b4ca6ff283624bb3359b2f9_NeikiAnalytics.exe
-
Size
3.1MB
-
MD5
ba7e2d7818b850830bbe09e83b8bdec0
-
SHA1
19912f46f3c2bb79db85816c4a36f8460f5a7bee
-
SHA256
8ed335347ca82e0ad62b162a8abc7dfdbff6455d9b4ca6ff283624bb3359b2f9
-
SHA512
caac43a08c4f08355e6c8ab3a5ac9e6484438bda668c7eb3e2497a91ad0e941c64e21b36780c8d2b38dcfaa27cecfaac2e3cd11661259c06383f68ed7209ddbc
-
SSDEEP
98304:71ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWK:7bBeSFke
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ed335347ca82e0ad62b162a8abc7dfdbff6455d9b4ca6ff283624bb3359b2f9_NeikiAnalytics.exe
Files
-
8ed335347ca82e0ad62b162a8abc7dfdbff6455d9b4ca6ff283624bb3359b2f9_NeikiAnalytics.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE