Behavioral task
behavioral1
Sample
2f55841f6ccc75acaf8390d8e8c909528a6c62bfd016e788068145c168aec07c.exe
Resource
win7-20240708-en
General
-
Target
2f55841f6ccc75acaf8390d8e8c909528a6c62bfd016e788068145c168aec07c.exe
-
Size
32KB
-
MD5
3d9cbe669e5802ff418f24d5c251347d
-
SHA1
c906a8366af35a92e673eafc8fe32202404dd5aa
-
SHA256
2f55841f6ccc75acaf8390d8e8c909528a6c62bfd016e788068145c168aec07c
-
SHA512
01f74185cd9065240cceb18b91f08162ade458fc71197df278c26fe75d6a492b1c47e0f2a854ac730a83186d6734cf5b87c4febb178ee157aa557095842301e8
-
SSDEEP
384:Yl3kcQnkUoSsJGG5ZfB3yIwt4U3Qu0/7FTgPtTFAqzms/sSiR:YWcQneSwP5ZRs4U3CeDsN
Malware Config
Extracted
njrat
0.7d
B HAT
a7eb3c1bb22a412bb3c20a9d0cbb6768
-
reg_key
a7eb3c1bb22a412bb3c20a9d0cbb6768
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f55841f6ccc75acaf8390d8e8c909528a6c62bfd016e788068145c168aec07c.exe
Files
-
2f55841f6ccc75acaf8390d8e8c909528a6c62bfd016e788068145c168aec07c.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ