Behavioral task
behavioral1
Sample
23fe074ccd32bac701216b5f81d583ba.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
23fe074ccd32bac701216b5f81d583ba.exe
Resource
win10v2004-20240508-en
General
-
Target
23fe074ccd32bac701216b5f81d583ba.exe
-
Size
93KB
-
MD5
23fe074ccd32bac701216b5f81d583ba
-
SHA1
6075305f1b9ab2e7d3b8e149172facf5ec73fb79
-
SHA256
5654470b4d81928b27e0da33152476f9e47ccd8bd08a05a4e19dd44d075866d5
-
SHA512
cb31b2a7f134a11ad0f9b84d8b1b7f688151effd6344ccd0dab591d8f200c9b37a208841a6aace9965c7c03ce3b3f740d71ef27c6ad92d1fc509825c7c218115
-
SSDEEP
1536:/CmC+xhUa9urgOB9RNvM4jEwzGi1dDGD7gS:/CgUa9urgONdGi1dg0
Malware Config
Extracted
njrat
0.7d
HacKed
hakim32.ddns.net:2000
0.tcp.eu.ngrok.io:19650
7e677771686d4a1bd4e8405fa3adac08
-
reg_key
7e677771686d4a1bd4e8405fa3adac08
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23fe074ccd32bac701216b5f81d583ba.exe
Files
-
23fe074ccd32bac701216b5f81d583ba.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ