Behavioral task
behavioral1
Sample
819410462be5d1f4e0eae2c46ef4057b3fb0d6beded7dff7d2ba370411a78a12.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
819410462be5d1f4e0eae2c46ef4057b3fb0d6beded7dff7d2ba370411a78a12.exe
Resource
win10v2004-20240508-en
General
-
Target
819410462be5d1f4e0eae2c46ef4057b3fb0d6beded7dff7d2ba370411a78a12
-
Size
1.1MB
-
MD5
7179fb07a6b373464abda2584b40d76c
-
SHA1
385ceb6b3aed312a9aa0c78032ee36287cb7140b
-
SHA256
819410462be5d1f4e0eae2c46ef4057b3fb0d6beded7dff7d2ba370411a78a12
-
SHA512
7e255a7b768225006b5b8f06011ad0fbefde22a985bb3b7dc8f02e9f90b5e92a3873e53e1ac8615a5fb3c9d80e3275a848979272d325c1709e7d4baec13f8e79
-
SSDEEP
24576:kCNsUJu1fL/K2hEram5MwevWzuSfQVezJ:xmUJu1fL/K2+WGevYuSfAel
Malware Config
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 819410462be5d1f4e0eae2c46ef4057b3fb0d6beded7dff7d2ba370411a78a12
Files
-
819410462be5d1f4e0eae2c46ef4057b3fb0d6beded7dff7d2ba370411a78a12.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ