Behavioral task
behavioral1
Sample
6e8424022727cc6525c6830637008a53d964993552918914668331774c8cfe90N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6e8424022727cc6525c6830637008a53d964993552918914668331774c8cfe90N.exe
Resource
win10v2004-20241007-en
General
-
Target
6e8424022727cc6525c6830637008a53d964993552918914668331774c8cfe90N
-
Size
18KB
-
MD5
f1c669a5b83aea3065e7fcb15baf4fb0
-
SHA1
4cb11a5dd4826140e08093473068bde8141d510a
-
SHA256
6e8424022727cc6525c6830637008a53d964993552918914668331774c8cfe90
-
SHA512
3a96c83d7c4d87b399e8fb4370aa0fb89b8142658a680ca6db797fd578d385638852726af7153ed2eb076d50a1b0de03a6751ce366875ec98eb99130d15de3a6
-
SSDEEP
384:LsqCm6yocx/Yp7jemiO0nd08/VQ6bgNQC5h7tmRvR6JZlbw8hqIusZzh:QSoQA6mlcrRpcnuQ
Malware Config
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e8424022727cc6525c6830637008a53d964993552918914668331774c8cfe90N
Files
-
6e8424022727cc6525c6830637008a53d964993552918914668331774c8cfe90N.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ