Behavioral task
behavioral1
Sample
e5fc6fa50c096e7ee056158a331d0200N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
e5fc6fa50c096e7ee056158a331d0200N.exe
Resource
win10v2004-20240802-en
General
-
Target
e5fc6fa50c096e7ee056158a331d0200N.exe
-
Size
91KB
-
MD5
e5fc6fa50c096e7ee056158a331d0200
-
SHA1
d7292ca52636ea62d551c18ca0bf63cae80bf13b
-
SHA256
554aec069a031be28fab52f26ffde3c76901b0d124f436dda23112b3a326858b
-
SHA512
e0a5d728ab4e9424b6c8ee3bff3338093cd34ee6eb1cc9b4e385e6013443cba77eb61dbcc85de7df56b03e5582f20feaa48a5ee9235024377d68a0770140b6ef
-
SSDEEP
768:v8GZeFkVOto7arfPiVXmbt2ELhtIh5YgnPaxJjoRY8TkCbIEhr3/iTnRVOR1MY43:vWFkoomm8RLhtIbYgna6LkMPVR1SpNv
Malware Config
Extracted
njrat
hakim32.ddns.net:2000
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e5fc6fa50c096e7ee056158a331d0200N.exe
Files
-
e5fc6fa50c096e7ee056158a331d0200N.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ