Behavioral task
behavioral1
Sample
97f41f50ca76cee45ea45d9b3bc875d0_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
97f41f50ca76cee45ea45d9b3bc875d0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
97f41f50ca76cee45ea45d9b3bc875d0_NeikiAnalytics.exe
-
Size
23KB
-
MD5
97f41f50ca76cee45ea45d9b3bc875d0
-
SHA1
8f0d2e422654a2d45d9df8f2707a39ccc09cd4f2
-
SHA256
2eba81c65b2b508b9f2197a54cf8aec82b75c82f55dd981abe52f5b96fb0928b
-
SHA512
0a278d1243cad040b1fd8e3c1e3c570330fd0cddd4dedfc3adadfaeb862b1511a16e73df19e8484684bef3a61d94481e02975fa90a1f452145b065e59b4b6e49
-
SSDEEP
384:VoWtkEwn65rgjAsGipk55D16xgXakhbZD0mRvR6JZlbw8hqIusZzZIj:a7O89p2rRpcnu5
Malware Config
Extracted
njrat
0.7d
HacKed
10.10.1.11:5552
7657c14284185fbd3fb108b43c7467ba
-
reg_key
7657c14284185fbd3fb108b43c7467ba
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 97f41f50ca76cee45ea45d9b3bc875d0_NeikiAnalytics.exe
Files
-
97f41f50ca76cee45ea45d9b3bc875d0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ