Behavioral task
behavioral1
Sample
63027d093681f243f42cf00064dc5952bd3d8f2ed3d26a48f5d057a612c92273.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
63027d093681f243f42cf00064dc5952bd3d8f2ed3d26a48f5d057a612c92273.exe
Resource
win10v2004-20220414-en
General
-
Target
63027d093681f243f42cf00064dc5952bd3d8f2ed3d26a48f5d057a612c92273
-
Size
31KB
-
MD5
be66486e94874c679f64129b03d24d49
-
SHA1
8b123a37aa84be63c5c2dc7edde082c546a74447
-
SHA256
63027d093681f243f42cf00064dc5952bd3d8f2ed3d26a48f5d057a612c92273
-
SHA512
854c19cf9b3bf831a258c031f11cea0cdda93f3f98930f52f3c2e4f52ebfa6221a5589c3e819502c0a830331d2c5156ca68be71902c5c14f4a006bb34e13222f
-
SSDEEP
768:ZXQBlGFnf6zxV+NKPkvJfbv6/QmIDUu0tioDj:+Iqsb8QVkjj
Malware Config
Extracted
njrat
0.7d
MyBot
37.192.18.134:5552
e5b67957d32e942db213593a7a20d4bc
-
reg_key
e5b67957d32e942db213593a7a20d4bc
-
splitter
Y262SUCZ4UJJ
Signatures
-
Njrat family
Files
-
63027d093681f243f42cf00064dc5952bd3d8f2ed3d26a48f5d057a612c92273.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ