Behavioral task
behavioral1
Sample
792d4d7a1a0c7b192b231f03ef1b2c905f382a152bfc145702f2902c9e8efc79.exe
Resource
win7-20220414-en
General
-
Target
792d4d7a1a0c7b192b231f03ef1b2c905f382a152bfc145702f2902c9e8efc79
-
Size
93KB
-
MD5
618baf8e7c20ee01ebddec4d8830ab71
-
SHA1
5006da7e81c4b1b20607f1a201f92526c0861238
-
SHA256
792d4d7a1a0c7b192b231f03ef1b2c905f382a152bfc145702f2902c9e8efc79
-
SHA512
1d02345297c0fe5243674024934be9beca6cc2108bd83eb594cc82054dea117823d5f6940245438cf65e8078cdc1d64daac2b81d954e9666b84d0c4bdc7530e4
-
SSDEEP
768:2Y35YUsxgrKSMZAZL28d2WmtlX+RRoP++WqXxrjEtCdnl2pi1Rz4Rk3SQsGdpKgM:TYfxg1L2AZmDL+2jEwzGi1dDvDKgS
Malware Config
Extracted
njrat
0.7d
Hacker
aGFja2hvc3RuYW1lLmhvcHRvLm9yZwStrikStrik:MTk4NA==
c6941743bce17ae335bca7d6739b33d7
-
reg_key
c6941743bce17ae335bca7d6739b33d7
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
792d4d7a1a0c7b192b231f03ef1b2c905f382a152bfc145702f2902c9e8efc79.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ