Behavioral task
behavioral1
Sample
bd33e8551fd1f2160b5579bb3bbeac5cbc5b85eeb3fc33094dbac8675019d763.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bd33e8551fd1f2160b5579bb3bbeac5cbc5b85eeb3fc33094dbac8675019d763.exe
Resource
win10v2004-20220812-en
General
-
Target
bd33e8551fd1f2160b5579bb3bbeac5cbc5b85eeb3fc33094dbac8675019d763
-
Size
23KB
-
MD5
734a72fa06938e7beaed1e07c1508e20
-
SHA1
842062e2130b3a7cfa97124a9a18f6b35ffbdac5
-
SHA256
bd33e8551fd1f2160b5579bb3bbeac5cbc5b85eeb3fc33094dbac8675019d763
-
SHA512
3e215b2be4434317ca49f1d62fb3bf4bca3ed41aeca1c67bd94dc43a39e47af3263277da5f8ff67641fc8aa8e5e95ff0c5c4be6239da5d333f691693bc38d517
-
SSDEEP
384:U8aLWS0dABLYVq6RxP8MDFF09vK563gRMmJKUv0mRvR6JZlbw8hqIusZzZCF:zXcwt3tRpcnuV
Malware Config
Extracted
njrat
0.7d
HacKed
127.0.0.1:1337
5f76cab4062f3ff0306d0a613b00c588
-
reg_key
5f76cab4062f3ff0306d0a613b00c588
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
bd33e8551fd1f2160b5579bb3bbeac5cbc5b85eeb3fc33094dbac8675019d763.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ