Behavioral task
behavioral1
Sample
bb5a5aa96d7b7006250aa0cbb7848f13dea3a44efe232d38675b443c37771827.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bb5a5aa96d7b7006250aa0cbb7848f13dea3a44efe232d38675b443c37771827.exe
Resource
win10v2004-20221111-en
General
-
Target
bb5a5aa96d7b7006250aa0cbb7848f13dea3a44efe232d38675b443c37771827
-
Size
38KB
-
MD5
182224d4d615146f485abc9aa6089be0
-
SHA1
3362381c6122dbcbe21f1ce945575363995422d5
-
SHA256
bb5a5aa96d7b7006250aa0cbb7848f13dea3a44efe232d38675b443c37771827
-
SHA512
09255a1f869bf47b1cf9c9b703daf80e8dbd43bce70b03c4567419bf10c063240d8f42bb7f7b5b3f6c72462bf7217837d11114a05b360660ddbd96c49f463f6a
-
SSDEEP
384:OHc6ze6e1PAhJVzC3tC1im/BsTx46PgZ0rap9HBmRvR6JZlbw8hqIusZzZQEqero:OFe9EJLN/yRpcnudQZ5h/gbhkhAh
Malware Config
Extracted
njrat
0.7d
HacKed
dominiktadejnejc.no-ip.org:1177
6d38a4babf3af5967ac37b7c2f5a663e
-
reg_key
6d38a4babf3af5967ac37b7c2f5a663e
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
bb5a5aa96d7b7006250aa0cbb7848f13dea3a44efe232d38675b443c37771827.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ