Behavioral task
behavioral1
Sample
55eaf9800e9e633218657d884e92b310N.exe
Resource
win7-20240704-en
General
-
Target
55eaf9800e9e633218657d884e92b310N.exe
-
Size
485KB
-
MD5
55eaf9800e9e633218657d884e92b310
-
SHA1
140069b2cf88670c1743f049555532015b49f879
-
SHA256
ee55cbd3edad8e920b854fad787604c738e458e7e11f1da795a6c449383b367f
-
SHA512
591cf20492e4cab14dc3ffe249b069ae0a9cffc61bf11c03718f5f0f6524d55d2ac1032ee519a1861f6bd5663de6db30457a2bceddcb7ab0ce5b23644fa16074
-
SSDEEP
6144:n3C9BRo7tvnJ9oH0IRgZvjkUo7tvnJ9oH0IiVByq9CPobNV/:n3C9ytvngQjgtvngSV3CPobNV/
Malware Config
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55eaf9800e9e633218657d884e92b310N.exe
Files
-
55eaf9800e9e633218657d884e92b310N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 47KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
petite Size: 274B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ