Behavioral task
behavioral1
Sample
cb12622d732ac35c5c3aecda807eae56d19586c0aadb72f9fbbcfbccf5ba5675.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
cb12622d732ac35c5c3aecda807eae56d19586c0aadb72f9fbbcfbccf5ba5675.exe
Resource
win10v2004-20220414-en
General
-
Target
cb12622d732ac35c5c3aecda807eae56d19586c0aadb72f9fbbcfbccf5ba5675
-
Size
93KB
-
MD5
837ee2033f3b15202370072989665ebe
-
SHA1
b9911c786d6e2a282709d77547ffefffee0995b4
-
SHA256
cb12622d732ac35c5c3aecda807eae56d19586c0aadb72f9fbbcfbccf5ba5675
-
SHA512
b9c7405144c7e29d46cefdb79a46338b014bf636613a5c42a9e976cbf382ba6bdec81b6e07e35b898353fe1949afa17254163212a97ff57909da3b54e365e67c
-
SSDEEP
768:NY33UnD9O/pBcxYsbae6GIXb9pDX2t9zPL0OXLeuXxrjEtCdnl2pi1Rz4Rk3LsGu:wUxOx6baIa9ROj00ljEwzGi1dDXD4gS
Malware Config
Extracted
njrat
0.7d
HacKed
FRANSESCOTI3LjAuFRANSESCOC4x:NTU1Mg==
90cdc4299e3838b5249c33e1c7a2dd25
-
reg_key
90cdc4299e3838b5249c33e1c7a2dd25
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
cb12622d732ac35c5c3aecda807eae56d19586c0aadb72f9fbbcfbccf5ba5675.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ