Behavioral task
behavioral1
Sample
44cd7123bc5324f04013301668a20860_NeikiAnalytics.exe
Resource
win7-20240419-en
General
-
Target
44cd7123bc5324f04013301668a20860_NeikiAnalytics.exe
-
Size
63KB
-
MD5
44cd7123bc5324f04013301668a20860
-
SHA1
802580ec777cf9e51aa7eb7df4190b24b0ca9437
-
SHA256
26fd68686ffa3a78ef2f9d0968e90e964d5bdf05b5fd1f60a2492d8de171bb61
-
SHA512
9e632f7bd19861fa860d09ab5a2644668b219757adfd6a18ef30938b8a53c051c90f366c9ead3a6f81e86a04e33c7e06392541a40e9f9a2fa7a1575c1f8fab72
-
SSDEEP
1536:phjExLDRwQuNMXbmaeWs1lheeiMl8GbbXwZm3PGpZVclN:phjExLDRwQuNMXbreFlEeFmGbbXem3is
Malware Config
Extracted
asyncrat
1.0.7
192.168.1.8:4449
b44559ob6275jk16w8x
-
delay
3
-
install
false
-
install_folder
%AppData%
Signatures
Files
-
44cd7123bc5324f04013301668a20860_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ