Behavioral task
behavioral1
Sample
c25e2efcf612808a8f4a79474cac60b2f51eea52121acdd5990c45052f743dba.exe
Resource
win7-20220414-en
General
-
Target
c25e2efcf612808a8f4a79474cac60b2f51eea52121acdd5990c45052f743dba
-
Size
31KB
-
MD5
93acffd0b33c2b03eda54bfc141a6cf3
-
SHA1
c52480c12edf299374e90ece7fa9b65a714c2078
-
SHA256
c25e2efcf612808a8f4a79474cac60b2f51eea52121acdd5990c45052f743dba
-
SHA512
1d458115045c41531ff76f1497fe62bc14b62ea9f9025386ae83d927474874456f20895824e3d888f63b3e615d7312f7b661d9cb0b024e59daf4bc984a70e457
-
SSDEEP
768:5z0bRmRzj+zxJ+h4yqcvXTXv0KMQmIDUu0tieej:MMa0DDbMQVkkj
Malware Config
Extracted
njrat
0.7d
q
127.0.0.1:32339
e9de3e5c94b6187c8824494232b3dc7d
-
reg_key
e9de3e5c94b6187c8824494232b3dc7d
-
splitter
Y262SUCZ4UJJ
Signatures
-
Njrat family
Files
-
c25e2efcf612808a8f4a79474cac60b2f51eea52121acdd5990c45052f743dba.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ