Behavioral task
behavioral1
Sample
cb75f57beffcc7b1590a230e746812e303f7e37682c49a7b9fd7ac6f2dd5b078.exe
Resource
win7-20220812-en
General
-
Target
cb75f57beffcc7b1590a230e746812e303f7e37682c49a7b9fd7ac6f2dd5b078
-
Size
23KB
-
MD5
69fd8c75298e3c9a98f8cad5321d0220
-
SHA1
abef1bf2740d680aca21000c7fb0d7feb0ceeca3
-
SHA256
cb75f57beffcc7b1590a230e746812e303f7e37682c49a7b9fd7ac6f2dd5b078
-
SHA512
83d53d16a69494491368d8669316f5d1a9dfdd42074773919c6174d4cdc6cfc98e0efb1dbdbb0f0528efb5e2549ec99f452d3a33aa6dde5dbf95853a01c42eb3
-
SSDEEP
384:bc68yCaUVIhboNgfEimfkNzayS06vg5UhcpxH7ndmRvR6JZlbw8hqIusZzZDI:3873kgNfoaf6ARpcnu7
Malware Config
Extracted
njrat
0.7d
HacKed
127.0.0.1:27015
e59e1159116107350437e00718e35620
-
reg_key
e59e1159116107350437e00718e35620
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
cb75f57beffcc7b1590a230e746812e303f7e37682c49a7b9fd7ac6f2dd5b078.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ