Behavioral task
behavioral1
Sample
276d721d5853bf869e1192142f4e8750.exe
Resource
win7-20220812-en
General
-
Target
276d721d5853bf869e1192142f4e8750.exe
-
Size
31KB
-
MD5
276d721d5853bf869e1192142f4e8750
-
SHA1
605e161df2eb8f418774d0229ac1ce904c9b55e2
-
SHA256
075186c9b19cc75c4b84682f5be8798451cd366f53a26f6b62cf0892ec2b8040
-
SHA512
c7fdb2041713c8575b3c65ede62a3f46afaa709323aeca53bf48a20ae3978de902ebad1796b4c5137221ca84a7924482d4840c892d35dba92c87d5ec045710e8
-
SSDEEP
768:kdC5qdzNB0zx/6L4nm3GXdvq7QmIDUu0tio0j:96KTpUQVkUj
Malware Config
Extracted
njrat
0.7d
victory
crazydns.linkpc.net:2000
3cb850165ec96f4bf2a8a5d9fe446062
-
reg_key
3cb850165ec96f4bf2a8a5d9fe446062
-
splitter
Y262SUCZ4UJJ
Signatures
-
Njrat family
Files
-
276d721d5853bf869e1192142f4e8750.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ