Behavioral task
behavioral1
Sample
Sony Vegas Pro 19.exe
Resource
win10-20231023-en
General
-
Target
Sony Vegas Pro 19.exe
-
Size
36KB
-
MD5
32520b16f67a75d2ebae63c1f2a08512
-
SHA1
3f35fb6bd7ae2c8bee68aadcae3beb423be31d7d
-
SHA256
b6805cae76c347c964fb6e5e2fad475d0fd7aeb6a7c0e19b336d5e3e10fbc47b
-
SHA512
8b89f9dc228acf11e5ac3d1bc925c9f8656daaa47733482cc5858f17deff069ced0d850388f968f1fb8dbd834997c5afbfedde6edacfb9b499845f019990053e
-
SSDEEP
384:GLJuxgLXeA03/lvHWtfequqP9BR3MpAQk93vmhm7UMKmIEecKdbXTzm9bVhcau6s:gJ6kuPsOpA/vMHTi9bD0DjwQdG/Q
Malware Config
Extracted
njrat
v2.0
x
dnsbase505.ddns.net:4000
Windows
-
reg_key
Windows
-
splitter
|-F-|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource Sony Vegas Pro 19.exe
Files
-
Sony Vegas Pro 19.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ