Behavioral task
behavioral1
Sample
924fe956b0e6fa0ac0e816bb6bdb84f0eb57295c1551e29d51996791a99b1b15.exe
Resource
win7-20220901-en
General
-
Target
924fe956b0e6fa0ac0e816bb6bdb84f0eb57295c1551e29d51996791a99b1b15
-
Size
29KB
-
MD5
cc716fbbf0ac9957a15b57a1758a1c37
-
SHA1
53dd93689b2e248b33f6380e456954816423ad80
-
SHA256
924fe956b0e6fa0ac0e816bb6bdb84f0eb57295c1551e29d51996791a99b1b15
-
SHA512
eb0ccfc782ac3fb81b88e0eadab8e79b98d566b17b37d8c60c82a7c20dd830f225ad6015a9602efd2ff9593eee0690b81ac53518ce45e49ee11e6debb525db93
-
SSDEEP
384:ZppQjtl7jBnoKoK3JX15nHK4GumqDAEReIlGBsbh0w4wlAokw9OhgOL1vYRGOZzL:Z+7hoKoGJFNK4Aq1RehBKh0p29SgReI
Malware Config
Extracted
njrat
0.6.4
HacKed
127.0.0.1:1177
13e5090cee57967233f9b6a72ec1c5dd
-
reg_key
13e5090cee57967233f9b6a72ec1c5dd
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
924fe956b0e6fa0ac0e816bb6bdb84f0eb57295c1551e29d51996791a99b1b15.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ