Behavioral task
behavioral1
Sample
44f75cefb271fed1820a98845e7b4de27250ec5d35b431b96bdb3ae012876670.exe
Resource
win7-20220414-en
General
-
Target
44f75cefb271fed1820a98845e7b4de27250ec5d35b431b96bdb3ae012876670
-
Size
23KB
-
MD5
b0847a911269690bdd94e5e02615483e
-
SHA1
085c68285e372d49604ad35206ef124882593c3e
-
SHA256
44f75cefb271fed1820a98845e7b4de27250ec5d35b431b96bdb3ae012876670
-
SHA512
178d0bf64687a7a9b1d1596b52d3b2d9d18971722f71c5ec3482ef5c56f0f008e36ea8d8852be751cdc697a63fc16d42e143af7bb2e8887cabf5c7d94ba0d6db
-
SSDEEP
384:90Xn2650N38Zj+bxJeiZcsdfw6BgnewhreyRtmRvR6JZlbw8hqIusZzZ4m:ujmMy1ZXRpcnuM
Malware Config
Extracted
njrat
Hallaj PRO Rat [Fixed]
14
mscompany.dynu.com:50001
a3bab510026d2f855af4149e862799fb
-
reg_key
a3bab510026d2f855af4149e862799fb
-
splitter
boolLove
Signatures
-
Njrat family
Files
-
44f75cefb271fed1820a98845e7b4de27250ec5d35b431b96bdb3ae012876670.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ