Behavioral task
behavioral1
Sample
acdcd0e846c7f1458c8e24336ed33bd0.exe
Resource
win7-20230712-en
General
-
Target
acdcd0e846c7f1458c8e24336ed33bd0.exe
-
Size
54KB
-
MD5
acdcd0e846c7f1458c8e24336ed33bd0
-
SHA1
4133703ca1409916ce76731b66447d5b46dffaed
-
SHA256
129c4c144e93fbc74c73e70d260ea088c238e2a6c6de24afd5da5c7cf693994e
-
SHA512
82422acb85365dc2323688448ff812dc1d47f0dd260d1502971744bfcf2c5b2a5cffd045c777c602d66d091b48326b02ff6d983fec32aefd8f450c50c3c558e2
-
SSDEEP
768:+SgLlLJfcP3hb5NiOrM+rMRa8Nu1VtPtQvKuzkE5nwGc:+SgLlLJUPhb5sR+gRJNGKSuzkqw
Malware Config
Extracted
njrat
im523
HacKed
7.tcp.eu.ngrok.io:14936
3d164dab2977f776fc409d5b9c25d22e
-
reg_key
3d164dab2977f776fc409d5b9c25d22e
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource acdcd0e846c7f1458c8e24336ed33bd0.exe
Files
-
acdcd0e846c7f1458c8e24336ed33bd0.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ