Behavioral task
behavioral1
Sample
83260a601cbf93b2f20fedc4a5628260N.exe
Resource
win7-20240705-en
General
-
Target
83260a601cbf93b2f20fedc4a5628260N.exe
-
Size
55KB
-
MD5
83260a601cbf93b2f20fedc4a5628260
-
SHA1
20ba5b79563ace74ef53bcd1739a80c1160d842c
-
SHA256
5a2e87f3516118517754f886ab185ea88c9d5f68d3caf0a9a95eec0a6757098b
-
SHA512
9c23de7a24aa707649d92c694b2cd03f789c745dd4476d8d669c52b87bf6201b79abbab17cd10e99a04812d03704b42a86811fc04d6449fa285b9a956bac124f
-
SSDEEP
1536:wTh5MDn5NRgyRhOzDawsNMDMXExI3pm8m:mMDnBxfOzDawsNMDMXExI3pm
Malware Config
Extracted
njrat
<- NjRAT 0.7d Horror Edition ->
Victim
147.185.221.21:15158
744c29ccf189a1a2a9314abe04d23c1f
-
reg_key
744c29ccf189a1a2a9314abe04d23c1f
-
splitter
Y262SUCZ4UJJ
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83260a601cbf93b2f20fedc4a5628260N.exe
Files
-
83260a601cbf93b2f20fedc4a5628260N.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ