Behavioral task
behavioral1
Sample
JaffaCakes118_523fc109d1af169e33450f7a22ade780.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_523fc109d1af169e33450f7a22ade780.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_523fc109d1af169e33450f7a22ade780
-
Size
23KB
-
MD5
523fc109d1af169e33450f7a22ade780
-
SHA1
0a1caf6b0fb09a43995f3714ecdbb651fb5b94fe
-
SHA256
df0e80346cf5e35a6c0e840620455a85fa2b4e76d1e3115ec401e457dcc06b93
-
SHA512
49d51826bf8ddfb32711f903595cee4aaf947fde4ea3381f554ecb3fb59391e417909c8836b7b01d41504b3d71c7083bce8db24bc9df375fc4b46fda41b4e047
-
SSDEEP
384:unalDC2twBo4SU7ly2RO8bJo6Hghc2JF/ZmRvR6JZlbw8hqIusZzZZRxcuW:ZdsHNRNRpcnukRW9
Malware Config
Extracted
njrat
0.7d
سجاد الزبيدي
sajad123455sajad.no-ip.biz:5552
8521abbd112b65f871605ce04dcd0539
-
reg_key
8521abbd112b65f871605ce04dcd0539
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_523fc109d1af169e33450f7a22ade780
Files
-
JaffaCakes118_523fc109d1af169e33450f7a22ade780.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ