Behavioral task
behavioral1
Sample
green.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
green.exe
Resource
win10v2004-20240419-en
General
-
Target
green.exe
-
Size
37KB
-
MD5
a0b45cd893fbd80f526ce1fb4b30e6ee
-
SHA1
7c4ec11476604a27ec8edbc294b37f9079ac93b8
-
SHA256
1c15ba71c177c5e1e0a71781a0e227ea3130a33e1d6bd7b048bc21bf68e33716
-
SHA512
013775f2aa4374ed9ed13d23d0ebdc10f64e9fd0843a12e1d95d3e115e103d07f6bc483dbefbe5011d37c80dae78cc1a179c37f9f81ec7b09c34c699970c9090
-
SSDEEP
384:BCCKMizd3jnBhFbJ8ycPj93tRwympwrAF+rMRTyN/0L+EcoinblneHQM3epzXfNx:cCg3lLJfcPj9XNmSrM+rMRa8NuxZt
Malware Config
Extracted
njrat
im523
HacKed
home.kanti.pw:30122
63eb49409a29a596299379308a2e1470
-
reg_key
63eb49409a29a596299379308a2e1470
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource green.exe
Files
-
green.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ