Behavioral task
behavioral1
Sample
95b89635d7e70cbfb3927de75fca512f70c0e1969a047eea9978c3d786a3aa0a.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
95b89635d7e70cbfb3927de75fca512f70c0e1969a047eea9978c3d786a3aa0a.exe
Resource
win10v2004-20220414-en
General
-
Target
95b89635d7e70cbfb3927de75fca512f70c0e1969a047eea9978c3d786a3aa0a
-
Size
78KB
-
MD5
528376e463b4a4162a2793dd2edc1d3e
-
SHA1
feb346d329280e763f3009b746ec75b22bdd27bb
-
SHA256
95b89635d7e70cbfb3927de75fca512f70c0e1969a047eea9978c3d786a3aa0a
-
SHA512
8ac1afc3d236b66800160e216835c913973301dd377f6c96f1b616a4fa45b935e09cf48618dac78b61913308d7a9ed312f94186573128770e1dc393829481a8c
-
SSDEEP
1536:5tz+6Y9yhU19DppS5wpOk3JCK6pFoRXd6fOpd/9nEh9TGVJwR:XhU19QwpOk5CK6DO/9ESVJw
Malware Config
Extracted
njrat
0.7.3
Lime
0.tcp.ngrok.io:16424
Client.exe
-
reg_key
Client.exe
-
splitter
12
Signatures
-
Njrat family
Files
-
95b89635d7e70cbfb3927de75fca512f70c0e1969a047eea9978c3d786a3aa0a.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ