Behavioral task
behavioral1
Sample
a97aebee89e9b02d41b014919b17c6d4a66af442478d7b78de7d2bfbb6a0b336.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a97aebee89e9b02d41b014919b17c6d4a66af442478d7b78de7d2bfbb6a0b336.exe
Resource
win10v2004-20220812-en
General
-
Target
a97aebee89e9b02d41b014919b17c6d4a66af442478d7b78de7d2bfbb6a0b336
-
Size
23KB
-
MD5
96dc3784d49b52f958f45bffc5edac10
-
SHA1
8fd711544decac9cab96e3f600378db6136d49c9
-
SHA256
a97aebee89e9b02d41b014919b17c6d4a66af442478d7b78de7d2bfbb6a0b336
-
SHA512
12ef1df9687304ff5a7f89c7ae56a285ad49a01d7e2ae2c5e1f543f873b1891b7d5992dc721f33f99cc1140f606a4af6703f4cb688c15287033dfba8b96b629c
-
SSDEEP
384:8sqSefmxpDQcx2cSusSUtL+06jgFACcyMZZjvRmRvR6JZlbw8hqIusZzZ9t:DVhL1sSFPyqgRpcnuE
Malware Config
Extracted
njrat
0.7d
xXx
127.0.0.1:9200
aea8f84570c5d2216045d7b2ed936eb3
-
reg_key
aea8f84570c5d2216045d7b2ed936eb3
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
a97aebee89e9b02d41b014919b17c6d4a66af442478d7b78de7d2bfbb6a0b336.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ