Behavioral task
behavioral1
Sample
b73db81183034ab4d6b042316da2085d8876fbf2d2416eb059b5c17085a91f7e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b73db81183034ab4d6b042316da2085d8876fbf2d2416eb059b5c17085a91f7e.exe
Resource
win10v2004-20220812-en
General
-
Target
b73db81183034ab4d6b042316da2085d8876fbf2d2416eb059b5c17085a91f7e
-
Size
89KB
-
MD5
dc3213e83f761d2227fc240f036d8c88
-
SHA1
fd98e53fe397c52b2764d26761416db7381d8151
-
SHA256
b73db81183034ab4d6b042316da2085d8876fbf2d2416eb059b5c17085a91f7e
-
SHA512
203c54a25bceba30c90653f49d50300229565acc7398c8398b8a1004d704be076b5ce441c06eeb460c067063e47e8ab5ccb29c1d0171219d6236b77d575abee7
-
SSDEEP
1536:T589ZvRWu4Sbjjjjjjjjjjzko1UxuQCCCAj:N8950KjjjjjjjjjjzkoQCCC
Malware Config
Extracted
njrat
0.7d
Arkan Net - 1
ziro.no-ip.biz:1177
cbf10e3ddf30bd5bee2a716508d4a4f9
-
reg_key
cbf10e3ddf30bd5bee2a716508d4a4f9
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
b73db81183034ab4d6b042316da2085d8876fbf2d2416eb059b5c17085a91f7e.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ