C:\Users\Malware\source\repos\AntiCryptor\stub\obj\Debug\Application.pdb
Behavioral task
behavioral1
Sample
9cc94b557cef772b9016893f8de0effff20c31d447c302223271db5433cc427bN.exe
Resource
win7-20241023-en
General
-
Target
9cc94b557cef772b9016893f8de0effff20c31d447c302223271db5433cc427bN.exe
-
Size
78KB
-
MD5
325a9949f709b3de45771feefecdacc0
-
SHA1
d3c25826a5a4e3099f231a748068fb882ecc340d
-
SHA256
9cc94b557cef772b9016893f8de0effff20c31d447c302223271db5433cc427b
-
SHA512
f9c3f9d261ec7b7161c45ea69c11200581baa3065ab9e5650e273b84d63552bbe5371ca844a09289802b240c9ade37274713b4e26e040076d2045227328f7fee
-
SSDEEP
1536:gUXF10zQoN36tKQviFw14fnqBnvbSfLteF3nLrB9z3nbaF9bKS9vMk:gUXF10zQoN36tKQviFC0qBn+fWl9zLad
Malware Config
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 9cc94b557cef772b9016893f8de0effff20c31d447c302223271db5433cc427bN.exe
Files
-
9cc94b557cef772b9016893f8de0effff20c31d447c302223271db5433cc427bN.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ