Behavioral task
behavioral1
Sample
a91381bad3f5ef7eb1a95dc7d89dd60dccc6a80389b29c524fb84913b71e1bf2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a91381bad3f5ef7eb1a95dc7d89dd60dccc6a80389b29c524fb84913b71e1bf2.exe
Resource
win10v2004-20221111-en
General
-
Target
a91381bad3f5ef7eb1a95dc7d89dd60dccc6a80389b29c524fb84913b71e1bf2
-
Size
135KB
-
MD5
b61d8d07574e0650adb25bdf1c3e6c5f
-
SHA1
1cc33ddb775273ba5f1639dfff2344d78af65d1d
-
SHA256
a91381bad3f5ef7eb1a95dc7d89dd60dccc6a80389b29c524fb84913b71e1bf2
-
SHA512
ba82dd009e2321039ad20b2ce5794f530e4c3ff7659d6217505f20722a7a5f5648be8fde3df06d4e7558878eeca15adfbde7eba3a2398105832fcfe521508be4
-
SSDEEP
768:5qW4V6+yDRpcnugrnskz+09lQk4GzjV0XEc2JP1iK2SwX7R81yqBP:gW4VcDRWugL/SclQBY50XvUP1R1fF
Malware Config
Extracted
njrat
0.7d
Hacked
maistro.no-ip.org:1177
89858a26c3b4f367dbcfa95959e39d35
-
reg_key
89858a26c3b4f367dbcfa95959e39d35
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
a91381bad3f5ef7eb1a95dc7d89dd60dccc6a80389b29c524fb84913b71e1bf2.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ