Behavioral task
behavioral1
Sample
8f4bff62879e1eca3bd9e4172ae6484db584b8516b8cdf6e95a78e36f457b725_NeikiAnalytics.exe
Resource
win7-20240611-en
General
-
Target
8f4bff62879e1eca3bd9e4172ae6484db584b8516b8cdf6e95a78e36f457b725_NeikiAnalytics.exe
-
Size
3.2MB
-
MD5
5dd4d4fdd8f3b0e7c25f055935d9f310
-
SHA1
6ae8a70156e53a112dfa8d2e1510f3e7a5f3b90b
-
SHA256
8f4bff62879e1eca3bd9e4172ae6484db584b8516b8cdf6e95a78e36f457b725
-
SHA512
4a3c6d6f5a65dc3689c6414820719944eb78f920005de02fcb53562bc80f0c9048b43a11cc307d3185820460728f79d9e5d2cadb6844ddd4cdface8c2dad1690
-
SSDEEP
98304:w0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc4k:wFWPClF0
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f4bff62879e1eca3bd9e4172ae6484db584b8516b8cdf6e95a78e36f457b725_NeikiAnalytics.exe
Files
-
8f4bff62879e1eca3bd9e4172ae6484db584b8516b8cdf6e95a78e36f457b725_NeikiAnalytics.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE