Behavioral task
behavioral1
Sample
b1a3c81101a64476b401a8889c4a2280a5a4e591bb4e5d184074934fade23c48.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b1a3c81101a64476b401a8889c4a2280a5a4e591bb4e5d184074934fade23c48.exe
Resource
win10v2004-20220812-en
General
-
Target
b1a3c81101a64476b401a8889c4a2280a5a4e591bb4e5d184074934fade23c48
-
Size
194KB
-
MD5
67ca864acaba6a7e02502538cc497760
-
SHA1
3cb2eaa09e9ae1ae64451fe7745d83118cfcdd6d
-
SHA256
b1a3c81101a64476b401a8889c4a2280a5a4e591bb4e5d184074934fade23c48
-
SHA512
2b32bcf490129f4e7a92987f6775b45fbab74377ed57d7d89a38136026459063df0ed43ef38da72610ecff3733a88ce144f3713391ea1278114729241f847244
-
SSDEEP
1536:jfIshKRWuWIzbouo8I0JyT3zYX9j1oJYVyyT:jIs808ouoh0YTDy9j1o
Malware Config
Extracted
njrat
0.7d
HacKed
chromehost.ddns.net:200
c96ffc7155e33bdb2e471b2aad6e0049
-
reg_key
c96ffc7155e33bdb2e471b2aad6e0049
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
b1a3c81101a64476b401a8889c4a2280a5a4e591bb4e5d184074934fade23c48.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 172KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ