Behavioral task
behavioral1
Sample
17135697a97c513dd0832eae13ac866a072007974bae62e50f29fe1500d0c5f9.exe
Resource
win7-20220812-en
General
-
Target
17135697a97c513dd0832eae13ac866a072007974bae62e50f29fe1500d0c5f9
-
Size
48KB
-
MD5
0865b7498f02548daf7af65962d872c0
-
SHA1
f85d4d4b5ea68c6f9ac3f7e87424a2dc19c13dfc
-
SHA256
17135697a97c513dd0832eae13ac866a072007974bae62e50f29fe1500d0c5f9
-
SHA512
56b7161e690c8f44b978d0c66aa5394b1ce66683d77be7b8e86fb4752063fb28e00b00e1c76c8cfb20ad216c23e70964644dec050e84fc3123a9f1ea56d5a64e
-
SSDEEP
384:Mc68yCaUVIhboNgfEimfkNzayS06vg5UhcpxH7ndmRvR6JZlbw8hqIusZzZeUA:y873kgNfoaf6ARpcnuR
Malware Config
Extracted
njrat
0.7d
moi
127.0.0.1:5552
defad80db98678f02043b532d1e85feb
-
reg_key
defad80db98678f02043b532d1e85feb
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
17135697a97c513dd0832eae13ac866a072007974bae62e50f29fe1500d0c5f9.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ