Behavioral task
behavioral1
Sample
fa21401f20cba55b974d46788986e56e2e385da3cdd9260872567036a70ce168.exe
Resource
win7-20220414-en
General
-
Target
fa21401f20cba55b974d46788986e56e2e385da3cdd9260872567036a70ce168
-
Size
31KB
-
MD5
f2599c8241785a47e4a5e54628e15ee2
-
SHA1
6126a67caf537bc201f5e8d56ca83d1d6f094e9a
-
SHA256
fa21401f20cba55b974d46788986e56e2e385da3cdd9260872567036a70ce168
-
SHA512
e9b84b27669d85de7e9410a02f726024efd24cdad1c8d5840c03f433a97c70b20d1bf4bb3888caea3e82461214f5fb756a7ba9fdb634658b795d11494c872e1a
-
SSDEEP
768:9eEchOVvZVYzxDCPAYb+/CIEpv6oHQmIDUu0tikuj:Y+6ahI6jQVk2j
Malware Config
Extracted
njrat
0.7d
install
2.132.107.223:6522
bd5be1175c6ff120fdbcfd0476b2cd35
-
reg_key
bd5be1175c6ff120fdbcfd0476b2cd35
-
splitter
Y262SUCZ4UJJ
Signatures
-
Njrat family
Files
-
fa21401f20cba55b974d46788986e56e2e385da3cdd9260872567036a70ce168.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ