Behavioral task
behavioral1
Sample
superpolygon.exe
General
-
Target
superpolygon.exe
-
Size
37KB
-
MD5
fa659ec039e8b5328badd34e4c193133
-
SHA1
281248a73da12039f5aad670b65a529582c878af
-
SHA256
6693a2710e891e1ac334af2d29ef3fdd8b4a65b737460934051543cf76a6ba33
-
SHA512
3d039935fec403dfeedb8a5ba53cc1b06a9c3f32924fb83b2b8538bc549b6d82c17b96efb4031ceab2d83184dd1f10f6a41cb61593bc273e97a07015ea19f323
-
SSDEEP
384:zmNTgiG1C1ZfursvO6yszIJ0nf+T3Qj4rAF+rMRTyN/0L+EcoinblneHQM3epzXS:SNB5WpszIJ0mzQUrM+rMRa8NuvIt
Malware Config
Extracted
njrat
im523
sex
standards-key.gl.at.ply.gg:5471
bc57c58d6c340623fc10c6460bd791a4
-
reg_key
bc57c58d6c340623fc10c6460bd791a4
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource superpolygon.exe
Files
-
superpolygon.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ