Behavioral task
behavioral1
Sample
2551424dd873fb2b5adb1051618bed835b07ec6a422449153f62a5d4c2ac1a6bN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2551424dd873fb2b5adb1051618bed835b07ec6a422449153f62a5d4c2ac1a6bN.exe
Resource
win10v2004-20241007-en
General
-
Target
2551424dd873fb2b5adb1051618bed835b07ec6a422449153f62a5d4c2ac1a6bN
-
Size
27KB
-
MD5
46cf4a7117792ca046868de21fe67e60
-
SHA1
c0601e8a68e7c903deff4bc8e5dd5d728ce67e33
-
SHA256
2551424dd873fb2b5adb1051618bed835b07ec6a422449153f62a5d4c2ac1a6b
-
SHA512
c7cd78a66f933bacc522bc036a942f2627bb3f944f1a199ce928f6be2f9c42303bd4a87f97d79e5c590c53fe9b61aa25b79df7615740cd6a83ccd6f04330aabe
-
SSDEEP
384:o0bUe5XB4e0XmObEc6WQzHWT8tTUFQqz9MObbe:dT9Bu1wcrQVabe
Malware Config
Extracted
njrat
0.7NC
NYAN CAT
seznam.zapto.org:5050
1e21c2fe0de74
-
reg_key
1e21c2fe0de74
-
splitter
@!#&^%$
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2551424dd873fb2b5adb1051618bed835b07ec6a422449153f62a5d4c2ac1a6bN
Files
-
2551424dd873fb2b5adb1051618bed835b07ec6a422449153f62a5d4c2ac1a6bN.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 656B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ