Behavioral task
behavioral1
Sample
a6f32d15c2d83286fe4de90337c90c8a3844d838aa9baad34fa76f492b5782cb.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a6f32d15c2d83286fe4de90337c90c8a3844d838aa9baad34fa76f492b5782cb.exe
Resource
win10v2004-20241007-en
General
-
Target
a6f32d15c2d83286fe4de90337c90c8a3844d838aa9baad34fa76f492b5782cb.exe
-
Size
37KB
-
MD5
b9ada94355eb4620796420f457edcaa1
-
SHA1
2913a116f9fea713045de4a59ae55d1fe4c407ec
-
SHA256
a6f32d15c2d83286fe4de90337c90c8a3844d838aa9baad34fa76f492b5782cb
-
SHA512
f241ce9603b2d7f8434d16beb607cef2b42cc6260813d7f1fa41ade3e9e421bd3ecde2bb22277daefefd970afef84c723c1d9f299f8bd5668de35b2acd6db33e
-
SSDEEP
384:CsmI2giHF1tJvubMcKyMTsCPpYTHusyrAF+rMRTyN/0L+EcoinblneHQM3epzX1N:tmDT/Jc5MTsCGzufrM+rMRa8NuPHt
Malware Config
Extracted
njrat
im523
HacKed
lol777.ddns.net:1212
422eaa97c415f834e53f120f3eb1c490
-
reg_key
422eaa97c415f834e53f120f3eb1c490
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6f32d15c2d83286fe4de90337c90c8a3844d838aa9baad34fa76f492b5782cb.exe
Files
-
a6f32d15c2d83286fe4de90337c90c8a3844d838aa9baad34fa76f492b5782cb.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ