Behavioral task
behavioral1
Sample
767b363f90b0c40e163ed186c8e315fadf69f14800d059d70900249a7046b298.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
767b363f90b0c40e163ed186c8e315fadf69f14800d059d70900249a7046b298.exe
Resource
win10v2004-20220901-en
General
-
Target
767b363f90b0c40e163ed186c8e315fadf69f14800d059d70900249a7046b298
-
Size
29KB
-
MD5
649a986a720c1f8135323cc5e6d19b70
-
SHA1
7f4b732a04844a8dc8fb40113859a9487f974d08
-
SHA256
767b363f90b0c40e163ed186c8e315fadf69f14800d059d70900249a7046b298
-
SHA512
228e71a384eae5019e9058b0a617e60e67e4cecf5a634b2679d8716f35d2653290d083409980230ef871fc3b6b7dba5f54c01be65b8924a32dd103cffd4df191
-
SSDEEP
768:HZA7TUP3xa+uKIIqQte3BKh0p29SgRvg:HZA7T4aS7x0KhG29jvg
Malware Config
Extracted
njrat
0.6.4
55
127.0.0.1:1177
c8b112a836547f5966e15184d5dddb2d
-
reg_key
c8b112a836547f5966e15184d5dddb2d
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
767b363f90b0c40e163ed186c8e315fadf69f14800d059d70900249a7046b298.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ