Behavioral task
behavioral1
Sample
bb037d726686f976dd564a6394ccad32e1fb6e2df4eaab8b9fc00bd9ec60f688.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
bb037d726686f976dd564a6394ccad32e1fb6e2df4eaab8b9fc00bd9ec60f688.exe
Resource
win10v2004-20231023-en
General
-
Target
bb037d726686f976dd564a6394ccad32e1fb6e2df4eaab8b9fc00bd9ec60f688
-
Size
91KB
-
MD5
76436945ccd54e2e068531802430e1e8
-
SHA1
9c48b7920886118cad41b5069fd9f0ef14f2c798
-
SHA256
bb037d726686f976dd564a6394ccad32e1fb6e2df4eaab8b9fc00bd9ec60f688
-
SHA512
7033bef57efe57f325c05cdbae0a6e90880a0ce4e426ba849ab2400666b39dd178a1147dfaaf62f2819b47c5be8d419bd4a9df0ec276cdfbdc9516f4fdbec4c0
-
SSDEEP
1536:lBTbkWWWipj69MME0n2ZXkaEkqVR1Zp4v:PTnqj69MICZJqVRl4
Malware Config
Extracted
njrat
hakim32.ddns.net:2000
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb037d726686f976dd564a6394ccad32e1fb6e2df4eaab8b9fc00bd9ec60f688
Files
-
bb037d726686f976dd564a6394ccad32e1fb6e2df4eaab8b9fc00bd9ec60f688.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ