Behavioral task
behavioral1
Sample
931E03D296E920701E86FA698A223CBC.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
931E03D296E920701E86FA698A223CBC.exe
Resource
win10v2004-20240508-en
General
-
Target
931E03D296E920701E86FA698A223CBC.exe
-
Size
32KB
-
MD5
931e03d296e920701e86fa698a223cbc
-
SHA1
7f8876cc0ff72da9edf3faf20493ee865b300ddc
-
SHA256
b944c2d2b450ec2a2ffce9b121e98dd3123da5209db9a16e2822a9bc0f6dd8bf
-
SHA512
834ff46277a68b2a55a7536580675e3617bc62b65ea9cf9ace7b7113134937191f3624cdddd7084a580dd929f46bef7e36503cc6e60b95b59a15359229b41091
-
SSDEEP
384:J0bUe5XB4e0X2O3fw0Q0mS03AWTxtTUFQqzFBObbJ:yT9Bulo55dbbJ
Malware Config
Extracted
njrat
0.7NC
NYAN CAT
4.203.104.98:1024
41286cbf1b41407
-
reg_key
41286cbf1b41407
-
splitter
@!#&^%$
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 931E03D296E920701E86FA698A223CBC.exe
Files
-
931E03D296E920701E86FA698A223CBC.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ