Behavioral task
behavioral1
Sample
c4c4e2f017a587274c41d56a145d04cd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c4c4e2f017a587274c41d56a145d04cd.exe
Resource
win10v2004-20220812-en
General
-
Target
c4c4e2f017a587274c41d56a145d04cd.exe
-
Size
27KB
-
MD5
c4c4e2f017a587274c41d56a145d04cd
-
SHA1
b0b26f581aa4b6008671292d4a38803ffb0fe47d
-
SHA256
1d911535128c2a1aa5a7f2a8659b54ca88512f866906f89068c8232852d72798
-
SHA512
4533b7898202e076a1f323c6c8b7b8e8f9ce052496c01bb0e4c58e374720128a18a47e1f5f03db0282704c94ee47a8243a7539cf4e5dc15f255e74f3ce23a77e
-
SSDEEP
384:FLam4PanO4Y7pcdYGiTOLsPodxxM2AQk93vmhm7UMKmIEecKdbXTzm9bVhcaX6m1:F63vc7OB2A/vMHTi9bD
Malware Config
Extracted
njrat
v2.0
HacKed
51.103.25.183:5552
Windows
-
reg_key
Windows
-
splitter
|-F-|
Signatures
-
Njrat family
Files
-
c4c4e2f017a587274c41d56a145d04cd.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ