swag-top-tier-cc[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

swag-top-tier-cc.zip
Size

19.4MB
MD5

0ff469bf1632b0434d593c4f5ea4fcc3
SHA1

0b12515772566a94d14c315b581d65b130290507
SHA256

2ce8cb36ecb4fd1fc004ac64495da7252223753658440fee143f9e6ce4b27d05
SHA512

d0e1b0bc9b0210bb3618939ac439202ce7a8f9d57863b07f1ccbef1649cba08a1927604dd2122b64398e769fe9f0b88b499b679cd832257449243fba22c108f4
SSDEEP

393216:Ma2Y4WsznaBmWJVEUKp4x+eOqnehPW0Q4oRET6GC4DzaC96t4vgHN8kjdvClzVya:x5eTVWJVbKpOOU0Qdy52C9Vvi2kJvqzB

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Njrat-main/NjRat 0.7D Green Edition by im523(Beta).exe
unpack001/Njrat-main/NjRat 0.7D Green Edition by im523.exe

Files

swag-top-tier-cc.zip
.zip
Njrat-main/NjRat 0.7D Green Edition by im523(Beta).exe
.exe windows:4 windows x86 arch:x86

5125e9eeced3c783f804d7eaef7ab689

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord1979
ord922
ord3318
ord354
ord5186
ord665
ord6385
ord5773
ord5442
ord1200
ord860
ord2846
ord2919
ord5572
ord800
ord540

msvcrt

_initterm
__set_app_type
_except_handler3
_controlfp
__p__commode
_adjust_fdiv
__p__fmode
exit
_XcptFilter
_exit
atol
_splitpath
_access
_tempnam
free
__CxxFrameHandler
__getmainargs
_acmdln
__setusermatherr
_stricmp

kernel32

GetTempPathA
GetSystemDirectoryA
GetCurrentDirectoryA
GetModuleFileNameA
GetWindowsDirectoryA
CopyFileA
Sleep
DeleteFileA
GetStartupInfoA
GetModuleHandleA

user32

GetDesktopWindow

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

shell32

ShellExecuteA

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Njrat-main/NjRat 0.7D Green Edition by im523.exe
.exe windows:4 windows x86 arch:x86

5125e9eeced3c783f804d7eaef7ab689

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord1979
ord922
ord3318
ord354
ord5186
ord665
ord6385
ord5773
ord5442
ord1200
ord860
ord2846
ord2919
ord5572
ord800
ord540

msvcrt

_initterm
__set_app_type
_except_handler3
_controlfp
__p__commode
_adjust_fdiv
__p__fmode
exit
_XcptFilter
_exit
atol
_splitpath
_access
_tempnam
free
__CxxFrameHandler
__getmainargs
_acmdln
__setusermatherr
_stricmp

kernel32

GetTempPathA
GetSystemDirectoryA
GetCurrentDirectoryA
GetModuleFileNameA
GetWindowsDirectoryA
CopyFileA
Sleep
DeleteFileA
GetStartupInfoA
GetModuleHandleA

user32

GetDesktopWindow

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

shell32

ShellExecuteA

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5125e9eeced3c783f804d7eaef7ab689

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

advapi32

shell32

Sections

.text Size: 8KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 1024B

.rsrc Size: 20KB - Virtual size: 16KB

5125e9eeced3c783f804d7eaef7ab689

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

advapi32

shell32

Sections

.text Size: 8KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 1024B

.rsrc Size: 20KB - Virtual size: 16KB

.text
Size: 8KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 1024B

.rsrc
Size: 20KB - Virtual size: 16KB

.text
Size: 8KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 1024B

.rsrc
Size: 20KB - Virtual size: 16KB