Behavioral task
behavioral1
Sample
hackbox-roblox_GM_archive.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
hackbox-roblox_GM_archive.exe
Resource
win10v2004-20230915-en
General
-
Target
hackbox-roblox_GM_archive.exe
-
Size
3.8MB
-
MD5
e3e9ac59877cedc1fdfefe9509ae614f
-
SHA1
d78663d0677635698c55c8bce975f91d1f558573
-
SHA256
caf068000fca29647092189feca9c386e18014f26a43c4eeb556967b12c4d668
-
SHA512
ccf216b4142b6a4eebb39c6130ce9281e493768a3f0a23e76907b681a675c68ddc46755026a407f1cd3b2e3d37c52ce0afc9b59fd373682481b4b60e1c7a9c1f
-
SSDEEP
768:UY+sNKqNHnSdRpcnu/lMJDhxlhzndlbb5Uo1Mj9yagS0zqJzv5NUOnM0W2+cYfbJ:N+sdV+RWu/lM5Dn5R29yIJDorfThgz
Malware Config
Extracted
njrat
0.7d
pidoras
89.47.1.10:6518
ecd6362c437ca109e38f01e32884f684
-
reg_key
ecd6362c437ca109e38f01e32884f684
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource hackbox-roblox_GM_archive.exe
Files
-
hackbox-roblox_GM_archive.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ