Behavioral task
behavioral1
Sample
cdae0db8a074b4bdf4c577e5fc653740e04e85a40dd46788d5d0e7b83e63825d.exe
Resource
win7-20240220-en
General
-
Target
cdae0db8a074b4bdf4c577e5fc653740e04e85a40dd46788d5d0e7b83e63825d
-
Size
485KB
-
MD5
ad52aadb41975c17becab423567ac3c7
-
SHA1
6e86bf3944f7a8e7d0688a9f58428205ea93fbff
-
SHA256
cdae0db8a074b4bdf4c577e5fc653740e04e85a40dd46788d5d0e7b83e63825d
-
SHA512
7c2fe792e4721b54586feb0cfd03ecd151031969c53e2d276b47b8f0e7ace1b605cff4f01e0965ea761f22df1db5660100b84e24a8b4a2ee84231c628c189f22
-
SSDEEP
6144:n3C9BRo7tvnJ9oH0IRgZvjkUo7tvnJ9oH0IiVByq9CPobNVc:n3C9ytvngQjgtvngSV3CPobNVc
Malware Config
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cdae0db8a074b4bdf4c577e5fc653740e04e85a40dd46788d5d0e7b83e63825d
Files
-
cdae0db8a074b4bdf4c577e5fc653740e04e85a40dd46788d5d0e7b83e63825d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 47KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
petite Size: 274B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ