Behavioral task
behavioral1
Sample
f584cfad98b43127b4926e288402c3f378355f3f4a8542a366081beff470fc07.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f584cfad98b43127b4926e288402c3f378355f3f4a8542a366081beff470fc07.exe
Resource
win10v2004-20221111-en
General
-
Target
f584cfad98b43127b4926e288402c3f378355f3f4a8542a366081beff470fc07
-
Size
23KB
-
MD5
50d5a3fd05dd566e0a74d5e0ea7f1ac8
-
SHA1
33262c57bab468629d622047204daa8abdb90058
-
SHA256
f584cfad98b43127b4926e288402c3f378355f3f4a8542a366081beff470fc07
-
SHA512
a0c272b2e0d3d031c654a6f0481304dafbafd4a73d3fcd9f3e6e009272c477f0d887d523ee768b861f5e228b1c4f72f905398885951ee0ba33538e5d3b65f0d8
-
SSDEEP
384:+Gwz6+T4IjWZFNwXU0eiNUB+vt6NgT+lLOhXxQmRvR6JZlbw8hqIusZzZtc:qTbC81NNRpcnuF
Malware Config
Extracted
njrat
0.7d
4
kadimon1.no-ip.info:5243
20b288331ea1f38d82005df62f97b2b1
-
reg_key
20b288331ea1f38d82005df62f97b2b1
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
f584cfad98b43127b4926e288402c3f378355f3f4a8542a366081beff470fc07.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ