Behavioral task
behavioral1
Sample
65D7B142F45B754789B2632F298E4796B3FD131C97D65.exe
Resource
win7-20220414-en
General
-
Target
65D7B142F45B754789B2632F298E4796B3FD131C97D65.exe
-
Size
32KB
-
MD5
165aeffd71c66e7ac573dfc19819bcab
-
SHA1
1d3ceea5c22f05c017e690f59660362fba26ad49
-
SHA256
65d7b142f45b754789b2632f298e4796b3fd131c97d650a626e080bebac9aa0e
-
SHA512
eaab9ef51e1f07236d20455f995c749a5c0c82c9b8ddaed70e699b2792fd37b549f426b920d6a788d51632f630c5cdb6a5b6177846e7d5d715ae1c88fd6bc37f
-
SSDEEP
384:fWtTLComX+g8Z8z4coG/XQWTRtTUF0qz9Q53:fWBLCQx2kcZXz
Malware Config
Extracted
njrat
0.7d
NYAN CAT
urregular.ddnsgeek.com:5552
68a9b10836724c0ba1cb7d53fa0c5d44
-
reg_key
68a9b10836724c0ba1cb7d53fa0c5d44
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
65D7B142F45B754789B2632F298E4796B3FD131C97D65.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ