Behavioral task
behavioral1
Sample
Untitled4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Untitled4.exe
Resource
win10v2004-20220812-en
General
-
Target
Untitled4
-
Size
32KB
-
MD5
790e389e58fc5e7abd3e643ed153a20e
-
SHA1
13816f5d11a170620ee42720cdc6ae3ffdf56d34
-
SHA256
32a0aad777a26be1491ef7641e9911fc7ff18d66b6aaf29b683e6b3eb08d2a9b
-
SHA512
7f14f9cb0193d12441a4e0b7ed0176ba86ccbc2fa16c7b6eccc2c5ac43405b1b3fcfc95fdf38372465052ce48bcf77533f05c74e421932d2bd45ba70063099c6
-
SSDEEP
384:y0bUe5XB4e0XmOD9Qq1pvmufCsIs4WTotTUFQqz9fwObbM:rT9Bu1ZQqvvmu6ZObM
Malware Config
Extracted
njrat
0.7NC
NYAN CAT
venomsi.mypsx.net:81
4c6c9a1bbdc34e6ebe
-
reg_key
4c6c9a1bbdc34e6ebe
-
splitter
@!#&^%$
Signatures
-
Njrat family
Files
-
Untitled4.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ