Behavioral task
behavioral1
Sample
c5b45a9b7053c3740d984d0c2fd3c2bd852437b2df051f6400a9455e879750f1.exe
Resource
win7-20220812-en
General
-
Target
c5b45a9b7053c3740d984d0c2fd3c2bd852437b2df051f6400a9455e879750f1
-
Size
23KB
-
MD5
ef7376ce5626b5e4390c6bd10d3ae5a3
-
SHA1
7cfbd432056119da7a689e4b400d80911ed6be51
-
SHA256
c5b45a9b7053c3740d984d0c2fd3c2bd852437b2df051f6400a9455e879750f1
-
SHA512
87ec4fb173f9d37e51c968f867cd1ec7b9ca85b2e5aa4c7eaf00f170ba65e2e2e78e1d6f59fb0e6acc5303a350b91c1c86bd6e2fb2802b5ca75ab11f433738c5
-
SSDEEP
384:ec6CqbFYh3odrVCGiHssDB4b6i6fgpEupNXRmRvR6JZlbw8hqIusZzZSUP:xIU0tw3Rpcnu5K
Malware Config
Extracted
njrat
0.7d
Hacked-by-Me
france24.ddns.net:5552
c6013014e2c6241afc69eb41d639eba1
-
reg_key
c6013014e2c6241afc69eb41d639eba1
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
c5b45a9b7053c3740d984d0c2fd3c2bd852437b2df051f6400a9455e879750f1.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ