Behavioral task
behavioral1
Sample
C1FBD85DD5037DCE43A981E71121C16A876A07925298B.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
C1FBD85DD5037DCE43A981E71121C16A876A07925298B.exe
Resource
win10v2004-20220901-en
General
-
Target
C1FBD85DD5037DCE43A981E71121C16A876A07925298B.exe
-
Size
23KB
-
MD5
d30dc36a5a7324539f786438549e65a6
-
SHA1
f18e469c914598bf92fd71ceba9fd89a9c58a187
-
SHA256
c1fbd85dd5037dce43a981e71121c16a876a07925298b413785e41ee5e3eb83e
-
SHA512
d72a1130dbc616d671108d89f364a011f657e3e50118899f77333fb2dc1c0bb3781036d793f3479ced76b570a75586f2ef12d5985d7f5f1597b826dfbbf595d7
-
SSDEEP
384:IRreWG5xTAcZFMiO7kcmW06agwTpXF8LRmRvR6JZlbw8hqIusZzZAUDP:PJZQF7+LRpcnuwP
Malware Config
Extracted
njrat
0.7d
147.50.253.226:5556
54ebbee64aa1de2ba8e053bf49396955
-
reg_key
54ebbee64aa1de2ba8e053bf49396955
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
C1FBD85DD5037DCE43A981E71121C16A876A07925298B.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ