Behavioral task
behavioral1
Sample
0a998db42df19c1651c0aad9c830794c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0a998db42df19c1651c0aad9c830794c.exe
Resource
win10v2004-20220812-en
General
-
Target
0a998db42df19c1651c0aad9c830794c.exe
-
Size
37KB
-
MD5
0a998db42df19c1651c0aad9c830794c
-
SHA1
bbfb75259e2d56d1c20b1e5fc3826da88850de88
-
SHA256
a93abb917de770a43ac5a64bb89e6893e862b7655824c651709cc05327908338
-
SHA512
7bc161015c2acd3de670bc8d0a5a5b790cd23ae4605b2b2f0e4b9fa959de1f287da2f0404a597ed496de63adb54a4ba0518b3e802f4dd406622077bc52d2b2b2
-
SSDEEP
384:yrTBkiy9nDNGRn5IyUvUIpvphM/6S99CrAF+rMRTyN/0L+EcoinblneHQM3epzXZ:OQ5M5jUvZpIiSyrM+rMRa8Nu5zt
Malware Config
Extracted
njrat
im523
348753468
20.206.75.74:5552
f4efcac4a8e0267a76578eb18db29825
-
reg_key
f4efcac4a8e0267a76578eb18db29825
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
0a998db42df19c1651c0aad9c830794c.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ