Behavioral task
behavioral1
Sample
2f1cc715d0e5d4e9142be74287e75887ec207a6bc006c0617eef653fae74647c.exe
Resource
win7-20240705-en
General
-
Target
2f1cc715d0e5d4e9142be74287e75887ec207a6bc006c0617eef653fae74647c
-
Size
55KB
-
MD5
17315d95e80eb36cc51a7d25e4c8b231
-
SHA1
95006ad8de0a17dc3df6698e195e62b8ee32475e
-
SHA256
2f1cc715d0e5d4e9142be74287e75887ec207a6bc006c0617eef653fae74647c
-
SHA512
481a15c46dcf38562aa989f52330e556da90a3ce00190cedb2e00b2a39df5db3bcc3af743060fd8c75933d6ae756aa4bbc176708f36d3b4aa443b4663ca94608
-
SSDEEP
1536:OnQdIDnrNZtLy9CIDRwsNMDfXExI3pmmm:K6IDnRekIDRwsNMDfXExI3pm
Malware Config
Extracted
njrat
<- NjRAT 0.7d Horror Edition ->
Victim
great-it.gl.at.ply.gg:11149
4d5861675348411506f0e029827092c2
-
reg_key
4d5861675348411506f0e029827092c2
-
splitter
Y262SUCZ4UJJ
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f1cc715d0e5d4e9142be74287e75887ec207a6bc006c0617eef653fae74647c
Files
-
2f1cc715d0e5d4e9142be74287e75887ec207a6bc006c0617eef653fae74647c.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ