Behavioral task
behavioral1
Sample
B24B5D4673A0D5D38A33F74D7A4BEF54.exe
Resource
win7-20231215-en
General
-
Target
B24B5D4673A0D5D38A33F74D7A4BEF54.exe
-
Size
64KB
-
MD5
b24b5d4673a0d5d38a33f74d7a4bef54
-
SHA1
437c4c47d858edd1054458af082ad770681af490
-
SHA256
b6628209e55ed22f5dfa0554485ec30401d0d8f3c51de2f4cf214b221acc9fbd
-
SHA512
34a460f4bd767a24e34560128212f2a01b136abeffb238816fcbdce81e054e4319a00598b32639571588a4f214f00be2af50d6a1213e2d2edec83d8cf283fc0e
-
SSDEEP
1536:IwSuuI3lUq2PUDN/5lxOWmIqFXAqTg7oO6AIDl1:IwSjI32qrlxX3qb7OnIDl1
Malware Config
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource B24B5D4673A0D5D38A33F74D7A4BEF54.exe
Files
-
B24B5D4673A0D5D38A33F74D7A4BEF54.exe.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.voik Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE