Behavioral task
behavioral1
Sample
c59ebf6c31bf09a5b07608dba316fa37ee483f3c3ff35cfb8a50e64e27695860.exe
Resource
win7-20220812-en
General
-
Target
c59ebf6c31bf09a5b07608dba316fa37ee483f3c3ff35cfb8a50e64e27695860
-
Size
29KB
-
MD5
587ed7cc7c95cdbf9295908a7e2d04c0
-
SHA1
f44238662322f86602fcd6e3a5593508370afae0
-
SHA256
c59ebf6c31bf09a5b07608dba316fa37ee483f3c3ff35cfb8a50e64e27695860
-
SHA512
7736fd0f56a5a057c38545b88dabc3b7602cc2b01f4cb61cd5c093a4c210c2eda2aa0a3ee3fe4367b94ee2aeb12dd50e874029ce9245e1c07b7c92dc8c8de1a7
-
SSDEEP
384:etaFCtl7Dh+oqIqEXV5HEQTGumqDgN3eH6GBsbh0w4wlAokw9OhgOL1vYRGOZz0v:ej74oqIjlLTAqM3eFBKh0p29SgRuf
Malware Config
Extracted
njrat
0.6.4
HacKed
maxhackme0088.no-ip.org:1177
60f0d0e0d2dd518d7530a18795742b3f
-
reg_key
60f0d0e0d2dd518d7530a18795742b3f
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
c59ebf6c31bf09a5b07608dba316fa37ee483f3c3ff35cfb8a50e64e27695860.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ