Behavioral task
behavioral1
Sample
b1bd24133e8ea08c2bbaf6bbd519a089aec77ddb9050046ccab186737da6bff9N.exe
Resource
win7-20240903-en
General
-
Target
b1bd24133e8ea08c2bbaf6bbd519a089aec77ddb9050046ccab186737da6bff9N.exe
-
Size
3.7MB
-
MD5
c722e843ae356cd0764da115f6f55430
-
SHA1
3bb76601ac55c18d393b3ff11b10de85e3c8ef58
-
SHA256
b1bd24133e8ea08c2bbaf6bbd519a089aec77ddb9050046ccab186737da6bff9
-
SHA512
92effee08d88dc4cf929c8e23380e6f1a9b6643794cf80bafd271af7eaad1a58a446ada6aa14a7fddb9444acaaaa2f0663231f3c01e47226345e4fe4b4ff5ebe
-
SSDEEP
49152:gCOfN6X5tLLQTg20ITS/PPs/1kS4eKRL/SRsj0Zuur1T75YqVUrmNF98w:U6XLq/qPPslzKx/dJg1ErmNv
Malware Config
Signatures
-
Njrat family
-
Processes:
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource b1bd24133e8ea08c2bbaf6bbd519a089aec77ddb9050046ccab186737da6bff9N.exe
Files
-
b1bd24133e8ea08c2bbaf6bbd519a089aec77ddb9050046ccab186737da6bff9N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE