Behavioral task
behavioral1
Sample
31f24a687e78048dd69114d16e9fb8d4dac18f64bf355c07f02c5613a0276efe.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
31f24a687e78048dd69114d16e9fb8d4dac18f64bf355c07f02c5613a0276efe.exe
Resource
win10v2004-20240802-en
General
-
Target
31f24a687e78048dd69114d16e9fb8d4dac18f64bf355c07f02c5613a0276efe.exe
-
Size
28KB
-
MD5
2757e4e46daf6e6c504b5f8dcbec1248
-
SHA1
3d472f3c09e05ff15f56e0ca57de6005299c35fb
-
SHA256
31f24a687e78048dd69114d16e9fb8d4dac18f64bf355c07f02c5613a0276efe
-
SHA512
5bd434b960c8f391f603d11d07f604dddbbaab6cf3f3ff5bd3e1674ffdff63d40c05eed1b852c0d97b86a945f2119c32494a09c39263f404967b7f0db944853c
-
SSDEEP
768:Yo1xhUXD7dl9tAgjFVIe+A90CC0y7Wt0LiJOb0KU:Yo1xhCD7dl9tAgjFVIe+A9BC0ayOb0KU
Malware Config
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31f24a687e78048dd69114d16e9fb8d4dac18f64bf355c07f02c5613a0276efe.exe
Files
-
31f24a687e78048dd69114d16e9fb8d4dac18f64bf355c07f02c5613a0276efe.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ