Behavioral task
behavioral1
Sample
5238bda5d2a35525c043b2140f9e80ff30045b5230d07a87436606fb2d606a6d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5238bda5d2a35525c043b2140f9e80ff30045b5230d07a87436606fb2d606a6d.exe
Resource
win10v2004-20220812-en
General
-
Target
5238bda5d2a35525c043b2140f9e80ff30045b5230d07a87436606fb2d606a6d
-
Size
74KB
-
MD5
95f0327d26ea34d88c34ba0374d96f31
-
SHA1
4276f0f1d258a4d65e17665eb4de4970fc1c5cd9
-
SHA256
5238bda5d2a35525c043b2140f9e80ff30045b5230d07a87436606fb2d606a6d
-
SHA512
d768d3ac9e5780ed63f5430f02d10af5ffbe0d7f066b0f22e13b9839af4a6de4b44b7ac6ca5f5b0e61b75ced2a3fc59c62b11a4001b07aace7f2592905dc2fa9
-
SSDEEP
1536:/m5I1pfBlTygdtMFyMQUZDBKafTpHfLjva+x9rru4zJpCcS:O5odtcyMQUZDBKaRjjvaO9rzJpCt
Malware Config
Extracted
njrat
0.7.3
Lime
127.0.0.1:6522
Client2.exe
-
reg_key
Client2.exe
-
splitter
12345
Signatures
-
Njrat family
Files
-
5238bda5d2a35525c043b2140f9e80ff30045b5230d07a87436606fb2d606a6d.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ