Behavioral task
behavioral1
Sample
5b4d20277110a5596ebd4f46a7b7388b2c2ea852c810c980efffbc620414e791.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5b4d20277110a5596ebd4f46a7b7388b2c2ea852c810c980efffbc620414e791.exe
Resource
win10v2004-20220812-en
General
-
Target
5b4d20277110a5596ebd4f46a7b7388b2c2ea852c810c980efffbc620414e791
-
Size
29KB
-
MD5
227a9eb20b210cee3a2eb1941e1f45b0
-
SHA1
5ee8e0a556d0dd2fbc93524f337fa7ba300cfbc1
-
SHA256
5b4d20277110a5596ebd4f46a7b7388b2c2ea852c810c980efffbc620414e791
-
SHA512
f8448f486beca1ba95090013ec5fb8bf43aef19584fc7a09c2e3bc0a8e9c257f38c0fe485235ef24de78dff40dac26ddc3f8fe95269fb83174f7326402a4fe1c
-
SSDEEP
768:kA7LeNXwlhgDZKUHZa93ooq5neXBKh0p29SgRo1:X7LPbI+KhG29jo1
Malware Config
Extracted
njrat
0.6.4
HacKed
nmch32.no-ip.biz:1177
5cd8f17f4086744065eb0992a09e05a2
-
reg_key
5cd8f17f4086744065eb0992a09e05a2
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
5b4d20277110a5596ebd4f46a7b7388b2c2ea852c810c980efffbc620414e791.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ