Behavioral task
behavioral1
Sample
253d2bc02e9a0b835ce9c7bf6f05bc9fa33bc60ddfb71f1da3de26befa103894.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
253d2bc02e9a0b835ce9c7bf6f05bc9fa33bc60ddfb71f1da3de26befa103894.exe
Resource
win10v2004-20240802-en
General
-
Target
253d2bc02e9a0b835ce9c7bf6f05bc9fa33bc60ddfb71f1da3de26befa103894.exe
-
Size
43KB
-
MD5
fa730ba7926d985677d9d33d0f714509
-
SHA1
3c0396c78d4b50a147522f9a64eef0387874215e
-
SHA256
253d2bc02e9a0b835ce9c7bf6f05bc9fa33bc60ddfb71f1da3de26befa103894
-
SHA512
efb111e8fcb31e7609219bf5c5ae4ba9ec467cdb9f6f539ee1bc5bc91493adce9ee57f7f8a24e77fa29abbd991fd32355f9d6a367bee3fa2396c4c3a8bfe4e57
-
SSDEEP
384:QZyVcVarEvEyeZ00s/Y0XMtZtQF8u9D9O5UE5QzwBlpJNakkjh/TzF7pWnN1gre3:WOcMYvReZ1s/tSZaWvQO+kD+L
Malware Config
Extracted
njrat
Njrat 0.7 Golden By Hassan Amiri
HacKeD
85:85
Windows Update
-
reg_key
Windows Update
-
splitter
|Hassan|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 253d2bc02e9a0b835ce9c7bf6f05bc9fa33bc60ddfb71f1da3de26befa103894.exe
Files
-
253d2bc02e9a0b835ce9c7bf6f05bc9fa33bc60ddfb71f1da3de26befa103894.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ