Behavioral task
behavioral1
Sample
cb82343acef323b48422da8bbc9f65f808bfbccd5fdb123f8f81cc2c98e2891a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cb82343acef323b48422da8bbc9f65f808bfbccd5fdb123f8f81cc2c98e2891a.exe
Resource
win10v2004-20221111-en
General
-
Target
cb82343acef323b48422da8bbc9f65f808bfbccd5fdb123f8f81cc2c98e2891a
-
Size
23KB
-
MD5
0f994511869c9f3cae93ed1d40e6e7d6
-
SHA1
8b9a08fa753dc60a87534dcbced0137edf2f080f
-
SHA256
cb82343acef323b48422da8bbc9f65f808bfbccd5fdb123f8f81cc2c98e2891a
-
SHA512
aad94d843be787aeb4551f7c6c36f5a0463aa8f0ae6bef4a218e269d90d4c30e8831157337c8068da6dd48992713a708c10590336adcdae51633d67a8e73fb88
-
SSDEEP
384:JPsqS+ER6vRKXGYKRWVSujUtX9w6Dglo61Z5DVmRvR6JZlbw8hqIusZzZFl:JEf65K2Yf1jKRpcnuM
Malware Config
Extracted
njrat
0.7d
HacKed
197.200.42.112:5552
e18c005b2e5ef9b22f2359aa3ea39ee7
-
reg_key
e18c005b2e5ef9b22f2359aa3ea39ee7
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
cb82343acef323b48422da8bbc9f65f808bfbccd5fdb123f8f81cc2c98e2891a.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ