Behavioral task
behavioral1
Sample
17d68adf3c62784796371cd3dc3eebc35bb6db44712cd866f4a425c32cb23a22.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
17d68adf3c62784796371cd3dc3eebc35bb6db44712cd866f4a425c32cb23a22.exe
Resource
win10v2004-20220812-en
General
-
Target
17d68adf3c62784796371cd3dc3eebc35bb6db44712cd866f4a425c32cb23a22
-
Size
48KB
-
MD5
915aa5a3b85ba4f28acd7d0e801b9080
-
SHA1
9f4843c58fff6c0ffde2a008e51b3223b97768e6
-
SHA256
17d68adf3c62784796371cd3dc3eebc35bb6db44712cd866f4a425c32cb23a22
-
SHA512
d7dfaaee463e2ddab8b7129edd60cba2834eae26a8b5cb9eab4b24666c38e3fc5759ecd79c6472f142d5bf5c5ba5d567caab9a357bd4ed667a6d94e85f7bdc28
-
SSDEEP
384:p8aLWS0dABLYVq6RxP8MDFF09vK563gRMmJKUv0mRvR6JZlbw8hqIusZzZ8k8:KXcwt3tRpcnuJR
Malware Config
Extracted
njrat
0.7d
HacKed
127.0.0.1:5552
279f6960ed84a752570aca7fb2dc1552
-
reg_key
279f6960ed84a752570aca7fb2dc1552
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
17d68adf3c62784796371cd3dc3eebc35bb6db44712cd866f4a425c32cb23a22.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ