Behavioral task
behavioral1
Sample
723f43f16596dabb26e8d8b5a11dbf745fc360eaffe1661267880818a7c81d7e.exe
Resource
win7-20240221-en
General
-
Target
723f43f16596dabb26e8d8b5a11dbf745fc360eaffe1661267880818a7c81d7e
-
Size
23KB
-
MD5
06b48fb0a677a7d3bc7cc31655a10c69
-
SHA1
e0c40b44e8c4e721091f12cfa2c455939b5a28ea
-
SHA256
723f43f16596dabb26e8d8b5a11dbf745fc360eaffe1661267880818a7c81d7e
-
SHA512
ed30f49f314c4a3cf9f7c58ffa9aa787e6ea1d807f8307418404357d2205c867ed55ebcf0214b5f30a05b7989d8a5ea75b778c952d3f537e2498aa3a4fc03b93
-
SSDEEP
384:3oWtkEwn65rgjAsGipk55D16xgXakhbZD0mRvR6JZlbw8hqIusZzZu8:Q7O89p2rRpcnu0
Malware Config
Extracted
njrat
0.7d
HacKed
127.0.0.1:25565
16b45d19f7961e391a022e6d9d270d41
-
reg_key
16b45d19f7961e391a022e6d9d270d41
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 723f43f16596dabb26e8d8b5a11dbf745fc360eaffe1661267880818a7c81d7e
Files
-
723f43f16596dabb26e8d8b5a11dbf745fc360eaffe1661267880818a7c81d7e.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ