Behavioral task
behavioral1
Sample
b05ad7a7bdeb9f4217dcf68f73817db032d55b9884f2ba69f40967af0abe218f.exe
Resource
win7-20220414-en
General
-
Target
b05ad7a7bdeb9f4217dcf68f73817db032d55b9884f2ba69f40967af0abe218f
-
Size
31KB
-
MD5
1ff8cbbd10873bd03aa7a2a8972536de
-
SHA1
64bb92321f86dae87d5cd4a3deb667a0eb5b5bdd
-
SHA256
b05ad7a7bdeb9f4217dcf68f73817db032d55b9884f2ba69f40967af0abe218f
-
SHA512
04226169bd38741c440a4956b2d3c740da06811d5aada571defec3c0cbed759ef78fce394506eaeb523014cf6ddc1672a943ee72f6c988de9c4556d30e7c373b
-
SSDEEP
768:eBaxirnp7VJMzxn6zQJyRm3dPlvyYQmIDUu0tiNjj:/0pKakJnQVkMj
Malware Config
Extracted
njrat
0.7d
hacker
gugu.zapto.org:6522
673a2b1b4c3514163eac4c9951b69533
-
reg_key
673a2b1b4c3514163eac4c9951b69533
-
splitter
Y262SUCZ4UJJ
Signatures
-
Njrat family
Files
-
b05ad7a7bdeb9f4217dcf68f73817db032d55b9884f2ba69f40967af0abe218f.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ