Behavioral task
behavioral1
Sample
77594eb4d0d6fb8e0410e5c0f7f1f2482191374e5fb4208fef537f5f25be2228.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
77594eb4d0d6fb8e0410e5c0f7f1f2482191374e5fb4208fef537f5f25be2228.exe
Resource
win10v2004-20220901-en
General
-
Target
77594eb4d0d6fb8e0410e5c0f7f1f2482191374e5fb4208fef537f5f25be2228
-
Size
29KB
-
MD5
0ca50b178502b53ae0d24778f9099030
-
SHA1
89bff5f490ff7d20216b2f88a8e898d8e0461d02
-
SHA256
77594eb4d0d6fb8e0410e5c0f7f1f2482191374e5fb4208fef537f5f25be2228
-
SHA512
ce60455f56e569125ff13ad0d38234f455bc302b9e06baa620c90be7efdcf1c3e1158d7a98b960d7709b88fa3c77db6db77664df767bfca1cc6125134b05a0fe
-
SSDEEP
384:zhI8O5l7FbNdtMTbeFbSI34X5hSpUoGmmqD62XeQfbVtGBsbh0w4wlAokw9OhgOg:zs7HM0SiSJowqZXeQCBKh0p29SgRYe
Malware Config
Extracted
njrat
0.6.4
HacKed
swag.zapto.org:1177
5cd8f17f4086744065eb0992a09e05a2
-
reg_key
5cd8f17f4086744065eb0992a09e05a2
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
77594eb4d0d6fb8e0410e5c0f7f1f2482191374e5fb4208fef537f5f25be2228.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ