Behavioral task
behavioral1
Sample
c19c43675c09a07c0de2b0bf81e6e8e0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c19c43675c09a07c0de2b0bf81e6e8e0N.exe
Resource
win10v2004-20240802-en
General
-
Target
c19c43675c09a07c0de2b0bf81e6e8e0N
-
Size
89KB
-
MD5
c19c43675c09a07c0de2b0bf81e6e8e0
-
SHA1
5be5b99c235bfea65350404b71078b197d39380e
-
SHA256
1f62a6987968cb02df6ccdd8fbec5f3d22d66866fc6de497a7c5ea5cec991e13
-
SHA512
0c50c30fa7ca5cbd4782b704f8d790a6c951285e7b67422439b228b319f7fef8c7cf46c421dd288bffde3f2b173450965c6c19c91f7572380242a10937c8c58d
-
SSDEEP
384:A1YmCsw/yJrQ7tRGSQCY1r46AgfCcBjdhmRvR6JZlbw8hqIusZzZpHUWQhYgjF:Aq7GktQmRpcnuk0BCaF
Malware Config
Extracted
njrat
0.7d
HacKed By sniper
sniperexe.ddns.net:5552
8b99b6f984f1c566e57684117b85eb25
-
reg_key
8b99b6f984f1c566e57684117b85eb25
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c19c43675c09a07c0de2b0bf81e6e8e0N
Files
-
c19c43675c09a07c0de2b0bf81e6e8e0N.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ