Behavioral task
behavioral1
Sample
b1aa8fa25920c736ed82588f0569f540c4fd79bfb8b57bb1ce568416dd7a6978.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b1aa8fa25920c736ed82588f0569f540c4fd79bfb8b57bb1ce568416dd7a6978.exe
Resource
win10v2004-20220901-en
General
-
Target
b1aa8fa25920c736ed82588f0569f540c4fd79bfb8b57bb1ce568416dd7a6978
-
Size
29KB
-
MD5
13a31eac553b07c4910b1efcf2155db4
-
SHA1
7945dd31e029490857a0db4a6f50a1ca9744a738
-
SHA256
b1aa8fa25920c736ed82588f0569f540c4fd79bfb8b57bb1ce568416dd7a6978
-
SHA512
24677a42d8ec8b91f9eb165a0563b76e31c624fdbcbe572b2c25a6c25ba486a7191de30f782bb7890b0ce18c0c34e3536e3b11108635f03a73209cb961fd7b58
-
SSDEEP
768:ZQv/27NYsDkfZPoIqlHepBKh0p29SgRp6:6m7N143wEKhG29jp6
Malware Config
Extracted
njrat
0.6.4
HacKed
hax34.no-ip.biz:1177
5cd8f17f4086744065eb0992a09e05a2
-
reg_key
5cd8f17f4086744065eb0992a09e05a2
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
b1aa8fa25920c736ed82588f0569f540c4fd79bfb8b57bb1ce568416dd7a6978.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ