Behavioral task
behavioral1
Sample
b7342013e7e4ce1b7b7b1ab39c037390_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b7342013e7e4ce1b7b7b1ab39c037390_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
b7342013e7e4ce1b7b7b1ab39c037390_NeikiAnalytics
-
Size
91KB
-
MD5
b7342013e7e4ce1b7b7b1ab39c037390
-
SHA1
08c87e771a1b9f24e80d3b7ce9bffd72dc7ed531
-
SHA256
178017f0e52ccc6d509d769b1fc1a6507f0e9cb560ad23e901483c16d9a03448
-
SHA512
465bcf2594a7892e5a12e7d1005136576b498e6e2197c9ecc9b5f68abdfd6a861215058c0609a0c8b0b2eb3dabe36156f77c0b286d75e6a96a4abf1549cf4dd8
-
SSDEEP
768:lGZewSFUMKEd4fYi1JAtqkq32X8lxxmfExkHU0VYjkQCtx73/iOnsVOR1MY4GQym:fwSFDKckJR32X8PxmwvtkQgJR1PpMv
Malware Config
Extracted
njrat
hakim32.ddns.net:2000
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7342013e7e4ce1b7b7b1ab39c037390_NeikiAnalytics
Files
-
b7342013e7e4ce1b7b7b1ab39c037390_NeikiAnalytics.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ