Behavioral task
behavioral1
Sample
5afcca01b16f3242c14204f77ed180ffd8a7cf60c86bdf4099e95a37412d1fb2.exe
Resource
win7-20220812-en
General
-
Target
5afcca01b16f3242c14204f77ed180ffd8a7cf60c86bdf4099e95a37412d1fb2
-
Size
29KB
-
MD5
6ef684fd2a576eaba8de0aaf4b077da0
-
SHA1
cd45eef4c6bbd4eab721757f70f4887a87fbe6ea
-
SHA256
5afcca01b16f3242c14204f77ed180ffd8a7cf60c86bdf4099e95a37412d1fb2
-
SHA512
a67a810afd4baee141d4b973fabcf2e53e0c0043b599e488e52c8885a8677ab0e788ae4b0c2e6faefc162b80339ff4f974d4d0724f3c84ae0b4a7c687938c93a
-
SSDEEP
384:lUHEBl7p3hUw2s7bD55gEKemqDSqre/IDGBsbh0w4wlAokw9OhgOL1vYRGOZzuZU:Z7bUw2C3kEcqNreHBKh0p29SgRIU
Malware Config
Extracted
njrat
0.6.4
HacKed
197.0.252.102:90
c136ca163c41529ca91ad6b874a035d7
-
reg_key
c136ca163c41529ca91ad6b874a035d7
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
5afcca01b16f3242c14204f77ed180ffd8a7cf60c86bdf4099e95a37412d1fb2.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ