Behavioral task
behavioral1
Sample
Injectorka.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Injectorka.exe
Resource
win10v2004-20240730-en
General
-
Target
Injectorka.exe
-
Size
93KB
-
MD5
c40c09bf0ce0defbe50f123e8d6a6174
-
SHA1
d39b7893f4ec53f38e3d05051097fb6cfee2ff7f
-
SHA256
272f68e5e473b2b091e97ee249a7a95aedef51070dcaf94211e573771477a672
-
SHA512
8f5a3b47ae47e0be43ad2925adc36b661c75f64bec2b3e797fc744925cdc186a1dda85ba2907e5a621f0c61a47662e1d3874ee8b3f7c8b31d79ba6ed3af069c4
-
SSDEEP
768:RY3PI530YTXspgM0m2zGjpyDtdXWuDtXYLWhyXxrjEtCdnl2pi1Rz4Rk3zsGdpD3:8IZ0AA0mT1mrWnL5jEwzGi1dD/DDgS
Malware Config
Extracted
njrat
0.7d
Erbaev
hakim32.ddns.net:2000
2.tcp.eu.ngrok.io:14407
007c897a11747d51de02720e8e1c37d9
-
reg_key
007c897a11747d51de02720e8e1c37d9
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Injectorka.exe
Files
-
Injectorka.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ