Behavioral task
behavioral1
Sample
e28411fbf6917c9c494b98bae922ce80d7c2b6faab726d54bc3f200dd06ae092.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
e28411fbf6917c9c494b98bae922ce80d7c2b6faab726d54bc3f200dd06ae092.exe
Resource
win10v2004-20240508-en
General
-
Target
e28411fbf6917c9c494b98bae922ce80d7c2b6faab726d54bc3f200dd06ae092
-
Size
23KB
-
MD5
45ff303662d84f92b764a1fb576867f4
-
SHA1
4677b95effa9cfa7517d29abdd9880cbee097ca7
-
SHA256
e28411fbf6917c9c494b98bae922ce80d7c2b6faab726d54bc3f200dd06ae092
-
SHA512
a1df4b1cd3fb9f5cb1153a50800bfe67f10510ac1342240f30b14d70df1fc57bb873b016ba2e34e8e914f631a92958c71567f2cfe585fcf9de4490dde06ed3f0
-
SSDEEP
384:aYmdk8XvCJrQLdRGSiEYF7Y65gPyx6BDXNRmRvR6JZlbw8hqIusZzZYV:NwWkti/aeRpcnuL
Malware Config
Extracted
njrat
0.7d
14 mai generateur xbox
89.94.35.57:1604
ef05e501c2e286164abf5fcaa961559f
-
reg_key
ef05e501c2e286164abf5fcaa961559f
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e28411fbf6917c9c494b98bae922ce80d7c2b6faab726d54bc3f200dd06ae092
Files
-
e28411fbf6917c9c494b98bae922ce80d7c2b6faab726d54bc3f200dd06ae092.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ