Behavioral task
behavioral1
Sample
f1d1ced19fece059f35bd938a035bea0_NEIKI.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
f1d1ced19fece059f35bd938a035bea0_NEIKI.exe
Resource
win10v2004-20240226-en
General
-
Target
f1d1ced19fece059f35bd938a035bea0_NEIKI
-
Size
93KB
-
MD5
f1d1ced19fece059f35bd938a035bea0
-
SHA1
11b652510bcc9b1570d76e66767d99aab992893c
-
SHA256
38eafb95f8f90bb32139ddbf59e5f672dd2183a1c3a30cdfe93d09455e795698
-
SHA512
cf383a3407af46fb41248a501e0a6be445175bc749eae3e263b5df1d71cdca67a2c06fab0f68dfd81a22776d243d9f2670610e86d3fe2294b88e31d551046825
-
SSDEEP
1536:LYdrg4RMdHOK1QjxHFdjEwzGi1dDW/DJgS:LYd6HOK1QjRFqi1d6G
Malware Config
Extracted
njrat
0.7d
HacKed
hakim32.ddns.net:2000
0.tcp.eu.ngrok.io:11168
6d63ad3cd851a451cd75b5fdcccdf07b
-
reg_key
6d63ad3cd851a451cd75b5fdcccdf07b
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f1d1ced19fece059f35bd938a035bea0_NEIKI
Files
-
f1d1ced19fece059f35bd938a035bea0_NEIKI.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ