Behavioral task
behavioral1
Sample
41d2bc2f99c931544191a407a64d93eb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
41d2bc2f99c931544191a407a64d93eb.exe
Resource
win10v2004-20231215-en
General
-
Target
41d2bc2f99c931544191a407a64d93eb
-
Size
123KB
-
MD5
41d2bc2f99c931544191a407a64d93eb
-
SHA1
7773c4947f7f8e1b7e4c5a79a519ef0ef73c71f7
-
SHA256
1e39e682bcc7bc56e68b22787bfd53e2346f67bd1dad4cc374b65a8e54b1b0e1
-
SHA512
bab88c67972968c3fb0ac68f76044be812a49815ca081f548b945af3e765ae4ee42abfdb51ae3a851d83e01724ebaaa34de5091bec9424038d55ab6dd425cd19
-
SSDEEP
3072:UyBb0FxOikfyMhCUrAJbc8d+XNslVV/xzkSKV:DikfdrAdc8djwSQ
Malware Config
Extracted
njrat
0.7d
Victem New
test0day.zapto.org:1919
97c8dd348a81752049fc479a7db09101
-
reg_key
97c8dd348a81752049fc479a7db09101
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41d2bc2f99c931544191a407a64d93eb
Files
-
41d2bc2f99c931544191a407a64d93eb.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ