Behavioral task
behavioral1
Sample
cookie_generator.exe
Resource
win10-20240221-en
General
-
Target
cookie_generator.exe
-
Size
37KB
-
MD5
370a7d0e4d5991cc5ca44e6c421d162b
-
SHA1
e51da1016044711546cf1a2997e4d6bd8e073902
-
SHA256
0ef357846c7f3414e754946e94a09006588ba6a74095eb6e00d06b5a59ef8860
-
SHA512
b376a6a569e3fe24e0537ca60078cfcee8a2ac14a85966622982a543fc7c47981c2c9b48bffb7ef6826f9e880d4f85de888287ea9325ed982c4abbf3c637c379
-
SSDEEP
768:9nRANVdhKrVfKPLBkorM+rMRa8NuEdtN:9nRANVvKpfKPL2z+gRJNr
Malware Config
Extracted
njrat
im523
Bobrochila
7.tcp.eu.ngrok.io:17829
ff926029c90971f5c0aedf5487c0b060
-
reg_key
ff926029c90971f5c0aedf5487c0b060
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cookie_generator.exe
Files
-
cookie_generator.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ