Behavioral task
behavioral1
Sample
48CD54BF0C884470B13F2F93E96BCA90.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
48CD54BF0C884470B13F2F93E96BCA90.exe
Resource
win10v2004-20240802-en
General
-
Target
48CD54BF0C884470B13F2F93E96BCA90.exe
-
Size
23KB
-
MD5
48cd54bf0c884470b13f2f93e96bca90
-
SHA1
abcb0600c8ffeafd5b96e3ef5034ce3024b96676
-
SHA256
20e60612fdd5009c5e3357ab5ff5b48852d26ee470b8ddd2099ea25b21af5964
-
SHA512
a48998094529f58ab6ef21d0c3b26b2f6b949165249d0db7e7d855200c2f2b98423b8a4dedd31e11e98694e45d94846d735a7ac47de4a4935296cab17fe268c1
-
SSDEEP
384:uYmdk8XvCJrQLdRGSiEYo7Y65gPyx6BDXNRmRvR6JZlbw8hqIusZzZyBG:xwWkti8aeRpcnus
Malware Config
Extracted
njrat
0.7d
HacKed
angela-kindly.with.playit.plus:1406
ee609e59f5a0696643509514713fa3e3
-
reg_key
ee609e59f5a0696643509514713fa3e3
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48CD54BF0C884470B13F2F93E96BCA90.exe
Files
-
48CD54BF0C884470B13F2F93E96BCA90.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ