Behavioral task
behavioral1
Sample
c7ddec717bda7e1ef135d2815a795df62157cd14f1ac45c44c91868ae72c80d4.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c7ddec717bda7e1ef135d2815a795df62157cd14f1ac45c44c91868ae72c80d4.exe
Resource
win10v2004-20241007-en
General
-
Target
c7ddec717bda7e1ef135d2815a795df62157cd14f1ac45c44c91868ae72c80d4
-
Size
48KB
-
MD5
a6fed209276015af14b2f088d52282af
-
SHA1
7ee00d72c43b4f6720340637b2773e88664a1b70
-
SHA256
c7ddec717bda7e1ef135d2815a795df62157cd14f1ac45c44c91868ae72c80d4
-
SHA512
b7f0d9279c556e58063ee768c078fec87993596463f5006fd7510527a49b3d598584ebaf6d9894340313d46961cbfbb09a0c7ed9c86c5d7348a791d4f5817f9a
-
SSDEEP
768:dzvN+xBNneQbxS59ilnp/D2vGFI590TRXZ66QDY/X9u0hcb4yU:tV+xBNneQbxS0p/6vGFrKY/Xg8cb4y
Malware Config
Extracted
njrat
HacKed
53$79$73$74$65$6d$33$32
-
reg_key
53$79$73$74$65$6d$33$32
-
splitter
|-F-|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c7ddec717bda7e1ef135d2815a795df62157cd14f1ac45c44c91868ae72c80d4
Files
-
c7ddec717bda7e1ef135d2815a795df62157cd14f1ac45c44c91868ae72c80d4.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ