Behavioral task
behavioral1
Sample
6762f26d36066dd8b6cd180b69f3f117fcb1b314ee4d92cc2c7fa3ac91b934ae.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6762f26d36066dd8b6cd180b69f3f117fcb1b314ee4d92cc2c7fa3ac91b934ae.exe
Resource
win10v2004-20241007-en
General
-
Target
6762f26d36066dd8b6cd180b69f3f117fcb1b314ee4d92cc2c7fa3ac91b934ae.exe
-
Size
91KB
-
MD5
3da8e3ebbbc68f62e3df9dc5c0b9cdb0
-
SHA1
689b19d918d4138faa4507eb8227c504d438549a
-
SHA256
6762f26d36066dd8b6cd180b69f3f117fcb1b314ee4d92cc2c7fa3ac91b934ae
-
SHA512
a925651d935526717760bfa2b18e9ec66528b4b188f8ebb79bf529b57caf8e1f561034828ac42973a9a81a6304bb11d3faf600776b9c48029651dbca1821c62c
-
SSDEEP
768:EGZel/M+0uGAfIi+qXuzMywjZdLJakHX+xWvYR4SYzktFI3tr3/iTnRVOR1MY4Zw:Ol/l0pUjBjZdL4kHG5mktQJVR1Ap8vJ
Malware Config
Extracted
njrat
hakim32.ddns.net:2000
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6762f26d36066dd8b6cd180b69f3f117fcb1b314ee4d92cc2c7fa3ac91b934ae.exe
Files
-
6762f26d36066dd8b6cd180b69f3f117fcb1b314ee4d92cc2c7fa3ac91b934ae.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ