Behavioral task
behavioral1
Sample
596d70406bbdb48846e0cf664fad89280c3db7ec1962f6ba81f94959068e23deN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
596d70406bbdb48846e0cf664fad89280c3db7ec1962f6ba81f94959068e23deN.exe
Resource
win10v2004-20240802-en
General
-
Target
596d70406bbdb48846e0cf664fad89280c3db7ec1962f6ba81f94959068e23deN
-
Size
92KB
-
MD5
50dc90e5deb892a3ce56a22ea460da30
-
SHA1
98bcb8f0077f0a053a0ef3de0f4db61af9788d06
-
SHA256
596d70406bbdb48846e0cf664fad89280c3db7ec1962f6ba81f94959068e23de
-
SHA512
5a0cd62538fbf998c0e7406b5832c897c09835e80de7cb078882640cd8e78d75f9a178392fe565c7786b0db831f0c4e4f9869b6d9ca8cb28596398fae03d02b2
-
SSDEEP
1536:HVyoNlCss8VB/IckKynaBG7ctwPHetky:H3Sss8VB/7maBG7QwPet
Malware Config
Extracted
njrat
hakim32.ddns.net:2000
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 596d70406bbdb48846e0cf664fad89280c3db7ec1962f6ba81f94959068e23deN
Files
-
596d70406bbdb48846e0cf664fad89280c3db7ec1962f6ba81f94959068e23deN.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ