Behavioral task
behavioral1
Sample
9bdbd794aa81073836e9b8903dc3dd3f3d141361ac289cbd78f0c20d9e224d74.exe
Resource
win7-20220901-en
General
-
Target
9bdbd794aa81073836e9b8903dc3dd3f3d141361ac289cbd78f0c20d9e224d74
-
Size
23KB
-
MD5
26f5357f3d1f5cf588f0037e47ff507a
-
SHA1
1feb416dbc2be71eecac5b1d42ef042a81189595
-
SHA256
9bdbd794aa81073836e9b8903dc3dd3f3d141361ac289cbd78f0c20d9e224d74
-
SHA512
3d7ce3b2d5ffef631fb374424dc07cbc8634a772fdbf30dfff978418b16893601d3904da0b0c03fe407232c3fe0bcbb6b29aff7370e5c45e3e7c3286b23e9018
-
SSDEEP
384:nc6ze6e1PAhJVzC3tC1im/BsTx46PgZ0rap9HBmRvR6JZlbw8hqIusZzZJ9:le9EJLN/yRpcnu4
Malware Config
Extracted
njrat
0.7d
HaCkEr 8
xxx99.zapto.org:88
be98a6b58aa4e8e933cb8fa0f193fac6
-
reg_key
be98a6b58aa4e8e933cb8fa0f193fac6
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
9bdbd794aa81073836e9b8903dc3dd3f3d141361ac289cbd78f0c20d9e224d74.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ