Behavioral task
behavioral1
Sample
7e69e3e53d10a759b59a92a33e781e99f0d5141464f1e46a0941971045a06b46.exe
Resource
win7-20220812-en
General
-
Target
7e69e3e53d10a759b59a92a33e781e99f0d5141464f1e46a0941971045a06b46
-
Size
29KB
-
MD5
06ed57f000ef31dc0e261cc336a9b810
-
SHA1
5d4f4d05dd7a2e80d3b470898f79a7ddd7e76dce
-
SHA256
7e69e3e53d10a759b59a92a33e781e99f0d5141464f1e46a0941971045a06b46
-
SHA512
cc6b99018b5e20237a6cfd30bc1a3e8dad1a55a5740bf20a27be237c21c16a074ea793a59c0b75232a856f726d6d5bc57224b5934c7d407096e90b1ab608cbc0
-
SSDEEP
384:+uRltl7P1LWxu0m5yB5bttimWmqDEw5eQtGBsbh0w4wlAokw9OhgOL1vYRGOZzrl:Tp79Wxu0miztioqN5eBBKh0p29SgRd3
Malware Config
Extracted
njrat
0.6.4
HacKed
127.0.0.1:1177
d43e5b164c6476db4975604296775072
-
reg_key
d43e5b164c6476db4975604296775072
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
7e69e3e53d10a759b59a92a33e781e99f0d5141464f1e46a0941971045a06b46.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ