Behavioral task
behavioral1
Sample
1b32ce4cb4efc534e6716d1d52d7673c.exe
Resource
win7-20220414-en
General
-
Target
1b32ce4cb4efc534e6716d1d52d7673c.exe
-
Size
52KB
-
MD5
1b32ce4cb4efc534e6716d1d52d7673c
-
SHA1
aaf37379f8a17661b197f0e2314ba7e29fcec069
-
SHA256
046f0fdb5d6d0489e8a81c239f311c2a26e2ca18f5b58c4f4655e7ab1862e026
-
SHA512
ccf0262da4e9242225ff943a3e145b65068589df863a89fa97581abeac04355e102187843f2d596b0f324ed795862000e9b6af841b194e7fd4ed72cfe164bf6b
-
SSDEEP
768:lSgjlLJfcPfpP9K2rM+rMRa8NuARtw3e9fvbUq+KM5y9:lSgjlLJUHpPUp+gRJNv1RUq+J50
Malware Config
Extracted
njrat
im523
Kirieshka
4.tcp.eu.ngrok.io:17963
7a59d0933f6f469cabe3a8b0b803e909
-
reg_key
7a59d0933f6f469cabe3a8b0b803e909
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
1b32ce4cb4efc534e6716d1d52d7673c.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ