Behavioral task
behavioral1
Sample
96d0e033f61d74e9120b54511f1c8ccc166cf72a324129cb66ddaac8743ed3cf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
96d0e033f61d74e9120b54511f1c8ccc166cf72a324129cb66ddaac8743ed3cf.exe
Resource
win10v2004-20221111-en
General
-
Target
96d0e033f61d74e9120b54511f1c8ccc166cf72a324129cb66ddaac8743ed3cf
-
Size
23KB
-
MD5
ea17a31132772b5287998bae8d63bd21
-
SHA1
f1cd1308411013a19427ddd5942f9a2228a06add
-
SHA256
96d0e033f61d74e9120b54511f1c8ccc166cf72a324129cb66ddaac8743ed3cf
-
SHA512
c1926f3c1bebe0e30cf78712b2cb3276558765b11e3aa7d6be85e623957f4b57384ba9d0442199d1f4696cce862c15eb9d6b59f44f8f371951df763370f452bf
-
SSDEEP
384:ZsqCm6yocx/Yp7jemiO0nd08/VQ6bgNQC5h7tmRvR6JZlbw8hqIusZzZrTf:SSoQA6mlcrRpcnu4j
Malware Config
Extracted
njrat
0.7d
Ch-Cyber
ch-cyber2.no-ip.info:1177
6a3fb299c4f714e84fb88c82e8dae524
-
reg_key
6a3fb299c4f714e84fb88c82e8dae524
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
96d0e033f61d74e9120b54511f1c8ccc166cf72a324129cb66ddaac8743ed3cf.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ