Behavioral task
behavioral1
Sample
7edb03000c69e9f921fde960d64eeae0N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
7edb03000c69e9f921fde960d64eeae0N.exe
Resource
win10v2004-20240802-en
General
-
Target
7edb03000c69e9f921fde960d64eeae0N.exe
-
Size
91KB
-
MD5
7edb03000c69e9f921fde960d64eeae0
-
SHA1
98311660477d405e4f52d16e7bbbeb87bc137c3e
-
SHA256
1b3d94ae3694592e5ab9753968d00d8f6217a9738cfb52eb4910b6e11fbc1720
-
SHA512
db371440ee5aad76ea49f5aebcf373fe752b81b4f54bd130167fd0d9be96012bb9c6ccc39c75aa0dc16169f3927051d8954ab19bb0e0b8ca08760c74e3b71a4c
-
SSDEEP
1536:BaQqwzEwHKVwCTSOgoBG8mw2dJiqQT1DjijnjrmWUP0kj+eBZZd2ZqpAsKyvJuKL:4Q5VKVwcSOgoBG8fDjijnW7P0kj+eBZF
Malware Config
Extracted
njrat
hakim32.ddns.net:2000
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7edb03000c69e9f921fde960d64eeae0N.exe
Files
-
7edb03000c69e9f921fde960d64eeae0N.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ