Behavioral task
behavioral1
Sample
C69561188E0357B028AFFA4EEFDF7B77.exe
Resource
win7-20240508-en
General
-
Target
C69561188E0357B028AFFA4EEFDF7B77.exe
-
Size
1.3MB
-
MD5
c69561188e0357b028affa4eefdf7b77
-
SHA1
ad11c08edd776a8dbdd07cf09c2f0698f46a9dad
-
SHA256
855a117d13c9dc672ce5851dc93ece572d22dbe504acdf6b3dd22903e97afe13
-
SHA512
17639657c9800a6c7492641b2fbf32852558f87bc3fbc84ade384f91f9bc180b9a0b4e4f5b390cb0a9ef894e7731f769b938747ba197efa9b399df140ca7b713
-
SSDEEP
24576:wJvKzcVkyEq9DRho1jFP8ltPP01Ws7+wFPEl9ix4fpUzoQDt+egElxdqFWVCGC:gKzcCyEq9DRho/ctH01Ws74rA4RUBDHo
Malware Config
Extracted
njrat
0.7d
HacKed
x555hd.ddns.net:555
8357fcac226b59edf02cf5db0a407b2c
-
reg_key
8357fcac226b59edf02cf5db0a407b2c
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource C69561188E0357B028AFFA4EEFDF7B77.exe
Files
-
C69561188E0357B028AFFA4EEFDF7B77.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ