Behavioral task
behavioral1
Sample
roblox.exe
Resource
win10ltsc2021-20241023-en
General
-
Target
roblox.com
-
Size
27KB
-
MD5
ece47f6a290117baac1abe8e972fe774
-
SHA1
b4b330dfd2054f0ce2341b8e3c3425adf260615d
-
SHA256
f25582f73b8557d509b7b9d0fc598bf8dfe4591aeeca8e360bcd3e984a5ac5a6
-
SHA512
834a382c09c53e97406762c278a2541adac1d5466bb37a74315022d44e8ebbe1425c914e783afb4af425446f72a087177c0641d12fab013b88dd424eea781b9e
-
SSDEEP
384:lLEUcMLkeA08lfShrk2Ig9BPEBRXM+AQk93vmhm7UMKmIEecKdbXTzm9bVhcaz6:lVRq1ShZB+A/vMHTi9bD
Malware Config
Extracted
njrat
v2.0
HacKed
cnet-contracting.gl.at.ply.gg:10206
Windows
-
reg_key
Windows
-
splitter
|-F-|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource roblox.com
Files
-
roblox.com.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ