Behavioral task
behavioral1
Sample
d7df5d8bb14f27d0772623cfe2906a8f2ba6717ec9d3f06b633e3aeee782a675.exe
Resource
win7-20220414-en
General
-
Target
d7df5d8bb14f27d0772623cfe2906a8f2ba6717ec9d3f06b633e3aeee782a675
-
Size
93KB
-
MD5
e9d171e5b1c5efc89e580912ec391906
-
SHA1
23c8855cad568a45aebeb640e42ab7254076f540
-
SHA256
d7df5d8bb14f27d0772623cfe2906a8f2ba6717ec9d3f06b633e3aeee782a675
-
SHA512
b56a7c1b605e0c8cfb6134e28ec0b8b915784677a3da7d58c635dadaa81a962d0af5a4d984c495653e9a57daee14e0d232faa85b9194b2ce87960d76cb07b7a8
-
SSDEEP
768:vY37KBD9O/pBcxYsbae6GIXb9pDX2b9zPL0OXLeuXxrjEtCdnl2pi1Rz4Rk3HsGs:KKzOx6baIa9RIj00ljEwzGi1dDzDWgS
Malware Config
Extracted
njrat
0.7d
HacKed
FRANSESCOTI3LjAuFRANSESCOC4x:NTU1Mw==
17e7855137332dfa4f631e0bc88ed208
-
reg_key
17e7855137332dfa4f631e0bc88ed208
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
d7df5d8bb14f27d0772623cfe2906a8f2ba6717ec9d3f06b633e3aeee782a675.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ