Behavioral task
behavioral1
Sample
e9bf5d369d4f8f1beba70b1347f477e6ce0815f4af0d60b6439a67e5acc2e420.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e9bf5d369d4f8f1beba70b1347f477e6ce0815f4af0d60b6439a67e5acc2e420.exe
Resource
win10v2004-20220901-en
General
-
Target
e9bf5d369d4f8f1beba70b1347f477e6ce0815f4af0d60b6439a67e5acc2e420
-
Size
23KB
-
MD5
ed14cfaa5254b90b2c2df6737c6e5956
-
SHA1
5a390714c44123c025b822a77dac9425af9a388b
-
SHA256
e9bf5d369d4f8f1beba70b1347f477e6ce0815f4af0d60b6439a67e5acc2e420
-
SHA512
4fb6c87753d0e7546479f84a62ed318497217a2b056df3d4a594eea0f0d2b7dadd7dc67d8aec912ab1af269e24ac20f42be8b7de10a1bd967eec802ac94198f3
-
SSDEEP
384:gN1MKFYuEEhERvoBG16Xuy0MKNw6Tg1Y+75JTFmRvR6JZlbw8hqIusZzZwr:gN+W4V6+y0Rpcnut
Malware Config
Extracted
njrat
0.7d
sound
forfaitnet.no-ip.biz:5552
36462ac4ceabd203d2fca0ca4f1b7a74
-
reg_key
36462ac4ceabd203d2fca0ca4f1b7a74
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
e9bf5d369d4f8f1beba70b1347f477e6ce0815f4af0d60b6439a67e5acc2e420.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ