Behavioral task
behavioral1
Sample
179478c925ef441ff179a9b42493fb39.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
179478c925ef441ff179a9b42493fb39.exe
Resource
win10v2004-20230915-en
General
-
Target
179478c925ef441ff179a9b42493fb39.exe
-
Size
23KB
-
MD5
179478c925ef441ff179a9b42493fb39
-
SHA1
11b5f98e834d739cd9712ff018af3f9d55ef6999
-
SHA256
45a3a773aa1551f8f73f3dc1dcae0385bbf8b1d99b25929cb661ae20b6b3fc13
-
SHA512
d606617ba831ddf8b3c55070d8611d6ffc039d17a2196b8b6356738f0f5d589fa40bbca0fb7cb904d53b058ed76510c86a26fe2edd9acf99e1ad811aec61d252
-
SSDEEP
384:UoWSkWHa55BgDVRGipkItzY6vZg36Eh7FpmRvR6JZlbw8hqIusZzZwWa:DJuk9pHRpcnudp
Malware Config
Extracted
njrat
0.7d
HacKed
camera-shadows.gl.at.ply.gg:48659
97b58a06e9c88b28bf2602ea3047ff4b
-
reg_key
97b58a06e9c88b28bf2602ea3047ff4b
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 179478c925ef441ff179a9b42493fb39.exe
Files
-
179478c925ef441ff179a9b42493fb39.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ