Behavioral task
behavioral1
Sample
3e1e4faf11d4ea1f0be8e16658685f524fad1d5b464857422b88bbbacc878ab6.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3e1e4faf11d4ea1f0be8e16658685f524fad1d5b464857422b88bbbacc878ab6.exe
Resource
win10v2004-20240802-en
General
-
Target
3e1e4faf11d4ea1f0be8e16658685f524fad1d5b464857422b88bbbacc878ab6.exe
-
Size
32KB
-
MD5
491b2cc22402cd5000aa30bb3944567a
-
SHA1
b3f35dd837911e016e78a1ee9c4b24001760ced4
-
SHA256
3e1e4faf11d4ea1f0be8e16658685f524fad1d5b464857422b88bbbacc878ab6
-
SHA512
4d387fa3ef471f357975dd63c39fd2466e98652d99e94208a6299857b1eb6caa641940833435468fcc3f2d17dbff7fcf60aa06d9f857f6fdc10affceffd604b9
-
SSDEEP
384:4G5o4U+mVQQyQJsixtePRuRMNFPIk+TWq4lDModg9TdFpyFEIGsJjwE7UMcrie4J:RuV4kteSspiouDbEEIGfRL+f
Malware Config
Extracted
njrat
Hacked By HiDDen PerSOn
2ccdef4bb99c150c27469b80a97eb52c
-
reg_key
2ccdef4bb99c150c27469b80a97eb52c
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e1e4faf11d4ea1f0be8e16658685f524fad1d5b464857422b88bbbacc878ab6.exe
Files
-
3e1e4faf11d4ea1f0be8e16658685f524fad1d5b464857422b88bbbacc878ab6.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ