Behavioral task
behavioral1
Sample
975c2605472ffab2aff0d72e56eb7f17.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
975c2605472ffab2aff0d72e56eb7f17.exe
Resource
win10v2004-20231215-en
General
-
Target
975c2605472ffab2aff0d72e56eb7f17
-
Size
19KB
-
MD5
975c2605472ffab2aff0d72e56eb7f17
-
SHA1
aaf5fba3100c18403e13a1f0c035098fb79c065f
-
SHA256
98f3a60801a686a468a90d1980078835f07cf79166cc0e6c0312ea4b33c13a23
-
SHA512
203a949fbb08363bfd8d4d3885b17b51bec4041bab09350a658a80af30d85f9ec5d7b56787a4f9dd51e7f0b390595305a954ac5ac7039b1bd89b97d83f4965c8
-
SSDEEP
384:ORfbf3DI3OlVmgW14wAWifG5/w9w/9Mlc0/N3MDvbeIa4HQS4:OxDI3Or1W14ZWW9wFaF+mYr
Malware Config
Extracted
njrat
Zombie
selkngpp
-
reg_key
selkngpp
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 975c2605472ffab2aff0d72e56eb7f17
Files
-
975c2605472ffab2aff0d72e56eb7f17.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ