Behavioral task
behavioral1
Sample
c9b49d80b58e915501acb3131ca04668ab287a5b36e75d8cc3cafb3cafe229fe.exe
Resource
win7-20220812-en
General
-
Target
c9b49d80b58e915501acb3131ca04668ab287a5b36e75d8cc3cafb3cafe229fe
-
Size
28KB
-
MD5
83bdda717cebad7bb96d02ca4fffd9c0
-
SHA1
ad04ece65b214d85000d2211eeb1c54335e2b8a4
-
SHA256
c9b49d80b58e915501acb3131ca04668ab287a5b36e75d8cc3cafb3cafe229fe
-
SHA512
040c83722f7dc555bda77016202e3e80f64eb8830ede2db2c36e5ec272ce1106d01c86e345788ff2e49eaa37503c5a601dad79feba359ab6d512f513018e32b2
-
SSDEEP
384:OhpQjtl7jBnoKoK3JX15nHK4GumqDAEReIlGBsbh0w4wlAokw9OhgOL1vYRGOZzR:O27hoKoGJFNK4Aq1RehBKh0p29SgRqW
Malware Config
Extracted
njrat
0.6.4
humam
127.0.0.1:1212
13e5090cee57967233f9b6a72ec1c5dd
-
reg_key
13e5090cee57967233f9b6a72ec1c5dd
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
c9b49d80b58e915501acb3131ca04668ab287a5b36e75d8cc3cafb3cafe229fe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ