Behavioral task
behavioral1
Sample
2b955178965ff0b58e93087e74de4a7c901f2d5929aa998ee0ba1ce68d9b23a2.exe
Resource
win7-20240215-en
General
-
Target
2b955178965ff0b58e93087e74de4a7c901f2d5929aa998ee0ba1ce68d9b23a2
-
Size
487KB
-
MD5
5ad85a9f4cc166e4ac9b15df920a9a91
-
SHA1
37cf71ba290d3b05f6767c171c9d725cbff1ee59
-
SHA256
2b955178965ff0b58e93087e74de4a7c901f2d5929aa998ee0ba1ce68d9b23a2
-
SHA512
9b9153c97bc2fc94ec860846d4ea3492188879e3c9df16a96630a0f7fbca43003ae4e7a0d0e8be30e2900e2213de125aac2096d62ff68accf89bbaa22ee686e2
-
SSDEEP
6144:n3C9BRo7tvnJ9oH0IRgZvjkUo7tvnJ9oH0IiVByq9CPobNVlG:n3C9ytvngQjgtvngSV3CPobNVI
Malware Config
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b955178965ff0b58e93087e74de4a7c901f2d5929aa998ee0ba1ce68d9b23a2
Files
-
2b955178965ff0b58e93087e74de4a7c901f2d5929aa998ee0ba1ce68d9b23a2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 47KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
petite Size: 274B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ