Behavioral task
behavioral1
Sample
b1b661fec381628844d2e6ab3f5bf7d8d545b689500f083b3261095c55e37332.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
b1b661fec381628844d2e6ab3f5bf7d8d545b689500f083b3261095c55e37332.exe
Resource
win10v2004-en-20220112
General
-
Target
b1b661fec381628844d2e6ab3f5bf7d8d545b689500f083b3261095c55e37332
-
Size
78KB
-
MD5
26c37b7faa7e4be88b62a530a05766b6
-
SHA1
b93496235b92c66e0ef16d634ca21b9e276471d9
-
SHA256
b1b661fec381628844d2e6ab3f5bf7d8d545b689500f083b3261095c55e37332
-
SHA512
98587b1c1f61a0085092560411df3288f8bd594832c9314e38de7d3c9eb8479e94c18c51670566f827973bd6f93454e6ea057eeb3a1fb8c1259b32e62f38f65e
-
SSDEEP
1536:L5FT+dEVgDp/S5wpOk3JCK6pFo7Tb6fOpd/9nEh9TG2J+JR:AQwpOk5CK63O/9ES2Ja
Malware Config
Extracted
njrat
0.7.3
system
turk3i.ddns.net:1008
system.exe
-
reg_key
system.exe
-
splitter
123
Signatures
-
Njrat family
Files
-
b1b661fec381628844d2e6ab3f5bf7d8d545b689500f083b3261095c55e37332.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ