Behavioral task
behavioral1
Sample
NEAS.67224b2c3c3362b71e42cfa398ed2070.exe
Resource
win7-20231025-en
General
-
Target
NEAS.67224b2c3c3362b71e42cfa398ed2070.exe
-
Size
487KB
-
MD5
67224b2c3c3362b71e42cfa398ed2070
-
SHA1
e6be4370e6269f933c08e1a8e29e1c2d62dfd504
-
SHA256
97202ab008910f06928af89b15479fc1c6cf44d1d7f690148c1460cd899c3fd3
-
SHA512
a86f509c7619efb6858b3f1cb8bef732c1c5475b417e2e9f8ca679999742faa631a54ccd675417e62ec8451b3fc6fb3fc0e7c3083f60a6e34eb9a211f6f66200
-
SSDEEP
6144:n3C9BRo7tvnJ9oH0IRgZvjkUo7tvnJ9oH0IiVByq9CPobNVdQ5wz:n3C9ytvngQjgtvngSV3CPobNVdQY
Malware Config
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.67224b2c3c3362b71e42cfa398ed2070.exe
Files
-
NEAS.67224b2c3c3362b71e42cfa398ed2070.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 47KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
petite Size: 274B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ