Behavioral task
behavioral1
Sample
a56b590f350305bacd33b60e5c866c5ad9fb6a318ea8d9afe5149c1a49171d6d.exe
Resource
win7-20220414-en
General
-
Target
a56b590f350305bacd33b60e5c866c5ad9fb6a318ea8d9afe5149c1a49171d6d
-
Size
93KB
-
MD5
acc1465e2be291e70935abc7cf4bd21c
-
SHA1
f9ddf1b9d275e9b17fed8057eedddda15fef4a4a
-
SHA256
a56b590f350305bacd33b60e5c866c5ad9fb6a318ea8d9afe5149c1a49171d6d
-
SHA512
9173864524173d00839dd518766136537ec82ae2637b6c2fe16788eaba72068fe08dfcbb4e15d9de0c6aa8f2bb1aa025ba2902fe8e7acb8eaad5bed39429f213
-
SSDEEP
768:FY3YWelorpLocxYZJ6aL+2apOXKI/WpndwruXxrjEtCdnl2pi1Rz4Rk3OrsGdp43:bWko966aL9a+F+d5jEwzGi1dDED4gS
Malware Config
Extracted
njrat
0.7d
HacKer
FRANSESCOjUuFRANSESCOjkuFRANSESCOTFRANSESCOyLjEwNAStrikStrik:MTYwNA==
43eaed72e15ff576accb4dc56c41f93d
-
reg_key
43eaed72e15ff576accb4dc56c41f93d
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
a56b590f350305bacd33b60e5c866c5ad9fb6a318ea8d9afe5149c1a49171d6d.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ