Behavioral task
behavioral1
Sample
07b0e8f5a67adcc50fedec303e071a67.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
07b0e8f5a67adcc50fedec303e071a67.exe
Resource
win10v2004-20231215-en
General
-
Target
07b0e8f5a67adcc50fedec303e071a67
-
Size
48KB
-
MD5
07b0e8f5a67adcc50fedec303e071a67
-
SHA1
aa638b5a1346c82ad70d28279956974df1c7d806
-
SHA256
861f0e4a69b7fa6a663553ef0a7c2148b27013402bc67fad90b6e748eb85723d
-
SHA512
e3e5e325cd1834b656e6e04b29870035756d6efdcaded75984edf840da5ad059c34eea9abcfb1724c8d666c85065b6c2e914bc6ab555967a83b0ad865c68d65f
-
SSDEEP
768:zdPSSuCN/Mlh3LH1FLw4Q1rCyGC3bqIx9EoTDPbl3q9HfHTjrB6ddjbNsHgD4+i:z9SSVNiH1G46FhxRP1q9/8yADY
Malware Config
Extracted
njrat
0.7d
MyBot
taher1dexter.camdvr.org:6522
a679715e2cc4e4f7a4eb7c5e826e9d04
-
reg_key
a679715e2cc4e4f7a4eb7c5e826e9d04
-
splitter
Y262SUCZ4UJJ
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07b0e8f5a67adcc50fedec303e071a67
Files
-
07b0e8f5a67adcc50fedec303e071a67.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 571B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ