Behavioral task
behavioral1
Sample
d7e0f9f01d21669275b31575f2c2813aed31060df82a59841b569e6c9f0fa22c.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
d7e0f9f01d21669275b31575f2c2813aed31060df82a59841b569e6c9f0fa22c.exe
Resource
win10v2004-20220414-en
General
-
Target
d7e0f9f01d21669275b31575f2c2813aed31060df82a59841b569e6c9f0fa22c
-
Size
93KB
-
MD5
0731b24284bac8a51a07c316601a8acc
-
SHA1
013290bc0a3dba52122358f0e1aba4fb62dd8a94
-
SHA256
d7e0f9f01d21669275b31575f2c2813aed31060df82a59841b569e6c9f0fa22c
-
SHA512
4a25e8020cbe36de5a3a3409215fe97ab40c3079ec45d2df299ae119bf3096da8b917f70e8d745e903ff5501d3a74028de9e66a27103cda1622846f482f4d8f2
-
SSDEEP
768:TY3sU09AMxdOcxoff7VsIvzzp2XhiJ592Y+mXxrjEtCdnl2pi1Rz4Rk38sGdphgM:1UOAeGf72OzzWMwEjEwzGi1dD0DhgS
Malware Config
Extracted
njrat
0.7d
Condition
ODFRANSESCOuFRANSESCOjFRANSESCO0LjEyFRANSESCOy4xNwStrikStrik:NTU1Mg==
2ecbdcd843e3b195718e08c3d44e52a4
-
reg_key
2ecbdcd843e3b195718e08c3d44e52a4
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
d7e0f9f01d21669275b31575f2c2813aed31060df82a59841b569e6c9f0fa22c.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ