Behavioral task
behavioral1
Sample
a9ac0c55b838d0f7cf2f489911a71dca70270970d21c5de2c9d871656644e6ee.exe
Resource
win7-20220718-en
General
-
Target
a9ac0c55b838d0f7cf2f489911a71dca70270970d21c5de2c9d871656644e6ee
-
Size
23KB
-
MD5
dd9089cb883348bd95aaac1bd002f0cf
-
SHA1
ec126ecd96beb4b1f2b9020ec082f091c28643eb
-
SHA256
a9ac0c55b838d0f7cf2f489911a71dca70270970d21c5de2c9d871656644e6ee
-
SHA512
6255adf8fbf7617a01ffa272426927653be65cfcc2353da5f3021b877c57bd58855cc353dd7aad731a18b5542135079b0b19b284b8644be4fa574825cb4de754
-
SSDEEP
384:jQeCITxTz/w8nEUeC9UBNM46VgDO61Ba6hRmRvR6JZlbw8hqIusZzZJL:02brV93Rpcnue
Malware Config
Extracted
njrat
0.7d
HacKed
127.0.0.1:4444
7588a88a3cf5322524fb2d80e7679a74
-
reg_key
7588a88a3cf5322524fb2d80e7679a74
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
a9ac0c55b838d0f7cf2f489911a71dca70270970d21c5de2c9d871656644e6ee.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ