Behavioral task
behavioral1
Sample
7de3b15e07a9f2a44c66471b968c987f24ce94027f37634254004e4ee542aefe.exe
Resource
win7-20240221-en
General
-
Target
7de3b15e07a9f2a44c66471b968c987f24ce94027f37634254004e4ee542aefe
-
Size
486KB
-
MD5
ac02309672b57dd098ede29cede9b987
-
SHA1
78df2acb2d08cda80159fdf69907e0d8e6cc51e9
-
SHA256
7de3b15e07a9f2a44c66471b968c987f24ce94027f37634254004e4ee542aefe
-
SHA512
1687ad2fd36581e91a535426121495918080c0825db53534ba455fa79f30b76910a81af253617fa74bde793a63d95c4998aaccec108f9e6d1e222d0e27226d26
-
SSDEEP
6144:n3C9BRo7tvnJ9oH0IRgZvjkUo7tvnJ9oH0IiVByq9CPobNV0:n3C9ytvngQjgtvngSV3CPobNV0
Malware Config
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7de3b15e07a9f2a44c66471b968c987f24ce94027f37634254004e4ee542aefe
Files
-
7de3b15e07a9f2a44c66471b968c987f24ce94027f37634254004e4ee542aefe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 47KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
petite Size: 274B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ