Behavioral task
behavioral1
Sample
90912af0aa4a8de6a854853b9b0ea06c8ac3d6f645e308752ff26d23f8d96077_NeikiAnalytics.exe
Resource
win7-20240611-en
General
-
Target
90912af0aa4a8de6a854853b9b0ea06c8ac3d6f645e308752ff26d23f8d96077_NeikiAnalytics.exe
-
Size
3.2MB
-
MD5
cc5cc8fc9bce2cabbd125817d61313e0
-
SHA1
28fd83f6a7b56538e6994f295666ea596f4392a5
-
SHA256
90912af0aa4a8de6a854853b9b0ea06c8ac3d6f645e308752ff26d23f8d96077
-
SHA512
867bf5d39fd35dd5e5b18a9b0f3e48e263d3efe4a3c3f93a47b3838d0838eeb3bb22375bd96a7c468daf97b30c6f324aa3eadee22293f02b1bfac83c290ef9f4
-
SSDEEP
98304:w0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc4P:wFWPClFf
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 90912af0aa4a8de6a854853b9b0ea06c8ac3d6f645e308752ff26d23f8d96077_NeikiAnalytics.exe
Files
-
90912af0aa4a8de6a854853b9b0ea06c8ac3d6f645e308752ff26d23f8d96077_NeikiAnalytics.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 525KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE