Behavioral task
behavioral1
Sample
NEAS.720b50c46677f19549fde81ff95d9b40_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.720b50c46677f19549fde81ff95d9b40_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.720b50c46677f19549fde81ff95d9b40_JC.exe
-
Size
31KB
-
MD5
720b50c46677f19549fde81ff95d9b40
-
SHA1
672606627a1906cc5b3246d004df236eef166a11
-
SHA256
1f27e3e67e4ef956e25198d4358282e05ef20dca90236cc8652fb24c888d3e3c
-
SHA512
a5d22dbf5c2c970a92b496983090e55007bd51c8312297be9e30ac3ca387d22d38bafa480a2dfe8db1a274b11025772bb8f57d733a8e2d91f468d6e8edacbf6e
-
SSDEEP
384:isqS+ER6vRKXGYKRWVSujUtX9w6Dglo61Z5DVmRvR6JZlbw8hqIusZzZvxhy:9f65K2Yf1jKRpcnuSo
Malware Config
Extracted
njrat
0.7d
HacKed
sxtrm.myftp.biz:5552
83d48929bdcdaf360ba96d48bcabe6dd
-
reg_key
83d48929bdcdaf360ba96d48bcabe6dd
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.720b50c46677f19549fde81ff95d9b40_JC.exe
Files
-
NEAS.720b50c46677f19549fde81ff95d9b40_JC.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 564B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ