Behavioral task
behavioral1
Sample
3def051c87d3836f750b7df6d1809d10_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3def051c87d3836f750b7df6d1809d10_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
3def051c87d3836f750b7df6d1809d10_NeikiAnalytics.exe
-
Size
23KB
-
MD5
3def051c87d3836f750b7df6d1809d10
-
SHA1
8b6b24b92b199c4f77713e390b418aa3a4d3dd9f
-
SHA256
994bc3ce127db69fd6706f7b3598506d93843b821ba6914456107c6898ce9d25
-
SHA512
3704e96fd07d391a6b74477a28ab48336fff561d6c3eab838bf31f1e6447325a4810424a8f380634bc98cf13cb927ef73557b030386c36aa79e16f294ae5a721
-
SSDEEP
384:8+n2650N3qZbATcjRGC5Eo9D46BgnqUhay1ZmRvR6JZlbw8hqIusZzZF7j:rm+71d5XRpcnumv
Malware Config
Extracted
njrat
0.7d
HacKed
0.tcp.sa.ngrok.io:11162
a252b85a9eb96ab32201f3a1b20edc29
-
reg_key
a252b85a9eb96ab32201f3a1b20edc29
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3def051c87d3836f750b7df6d1809d10_NeikiAnalytics.exe
Files
-
3def051c87d3836f750b7df6d1809d10_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ