Behavioral task
behavioral1
Sample
cb6ec0075f5915620e92f73452f3f6e17a38144fa0bc6bd4c3329c59f2bdf120.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
cb6ec0075f5915620e92f73452f3f6e17a38144fa0bc6bd4c3329c59f2bdf120.exe
Resource
win10v2004-20240802-en
General
-
Target
cb6ec0075f5915620e92f73452f3f6e17a38144fa0bc6bd4c3329c59f2bdf120
-
Size
23KB
-
MD5
c307fbd220331c943ff8cc97e757d121
-
SHA1
63d7d6332b3dd437f3cb2f40449c9d2065a45c59
-
SHA256
cb6ec0075f5915620e92f73452f3f6e17a38144fa0bc6bd4c3329c59f2bdf120
-
SHA512
2c827572ac62a586cdc67bfe6af736086ff57e7fa0eae5e36e0caf062854169fb3ccc8ac5d844ddf1cdc7518eb20b7f6fb82e50178686fe0da3bc197d23612ff
-
SSDEEP
384:YweXCQIreJig/8Z7SS1fEBpng6tgL2IBPZVmRvR6JZlbw8hqIusZzZ6M:/Lq411eRpcnuw
Malware Config
Extracted
njrat
0.7d
HacKed
seizer.zapto.org:1177
2c14b3a0c6e67d40c4117fe11fd2e98f
-
reg_key
2c14b3a0c6e67d40c4117fe11fd2e98f
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb6ec0075f5915620e92f73452f3f6e17a38144fa0bc6bd4c3329c59f2bdf120
Files
-
cb6ec0075f5915620e92f73452f3f6e17a38144fa0bc6bd4c3329c59f2bdf120.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ