Behavioral task
behavioral1
Sample
a2c5cb61af57a357f0190326b2516971d26119ea26949f3985362d0bdff72269.exe
Resource
win7-20220812-en
General
-
Target
a2c5cb61af57a357f0190326b2516971d26119ea26949f3985362d0bdff72269
-
Size
31KB
-
MD5
ed6fa7987cad326bd67b56c31da8b210
-
SHA1
280ea993393950fb71b39bd1697820a08b20b282
-
SHA256
a2c5cb61af57a357f0190326b2516971d26119ea26949f3985362d0bdff72269
-
SHA512
4c91e3bb804b87322e2f62fbaf5f48e1b4ebcb65e5da35e9d397de4d4362ece8da2598ec42e6593e5261d82aad7e7d76df9fa31049be641e48b1a4b2bc7d0d41
-
SSDEEP
768:9VfaZ8pdv8yzx9uJZJCkvv/jvBeQmIDUu0titIj:+wHAjcQVkDj
Malware Config
Extracted
njrat
0.7d
Autoclicker Orbi
business-fuel.at.playit.gg:57348
052cbf1409a0ecdb54efcaa183d7db4a
-
reg_key
052cbf1409a0ecdb54efcaa183d7db4a
-
splitter
Y262SUCZ4UJJ
Signatures
-
Njrat family
Files
-
a2c5cb61af57a357f0190326b2516971d26119ea26949f3985362d0bdff72269.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ