Behavioral task
behavioral1
Sample
fixer.exe
Resource
win10v2004-20241007-en
General
-
Target
fixer.exe
-
Size
37KB
-
MD5
c7696b58deb5e95c507a043bf12be20a
-
SHA1
2e78f7d8c1b0d55f0a089b6f9c283a2ed1de7296
-
SHA256
355cc4d01ff4e1e7823a5f9309d132e156bbaccfd132843ff6b16c1a51e4e808
-
SHA512
714d7489a045e01657e3914f565e3459915276fe2cb80fd13f448eedf2b919bec0e6fe2c49e882954da8601e93cff93ff79a33a0771870e86e7c5e36d6d5078a
-
SSDEEP
384:d2IAJqDKicFD25Rg5Iy1vJAJ/xzaYa6NwlrAF+rMRTyN/0L+EcoinblneHQM3epQ:IIAGE5j1vJAJVal6mlrM+rMRa8Nunyt
Malware Config
Extracted
njrat
im523
boykisser
issues-religion.gl.at.ply.gg:24271
974d0e73d45f67eaec053d9149fad58b
-
reg_key
974d0e73d45f67eaec053d9149fad58b
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fixer.exe
Files
-
fixer.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ