Behavioral task
behavioral1
Sample
3019ff465d9d7c657aa4e111da5212ffefa360d50a4586274bd38e067c7211f8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3019ff465d9d7c657aa4e111da5212ffefa360d50a4586274bd38e067c7211f8.exe
Resource
win10v2004-20220812-en
General
-
Target
3019ff465d9d7c657aa4e111da5212ffefa360d50a4586274bd38e067c7211f8
-
Size
23KB
-
MD5
ba92dad10756935c6ba911220142f649
-
SHA1
52179e698584dc1eac64a0932db3df602a75b22e
-
SHA256
3019ff465d9d7c657aa4e111da5212ffefa360d50a4586274bd38e067c7211f8
-
SHA512
9323e99c80a76cd209d987bcbe25750e9ded79a657701802713fd70101550d9e84886afb329e62f5499870dfd2cb158b9cd3111e8e59cf8685eb22c26bb399c3
-
SSDEEP
384:d53gexUw/L+JrgUon5b9uSDMwT9Pfg6NgrWoBYi51mRvR6JZlbw8hqIusZzZX2:dVIAKG91DP1hPRpcnu9
Malware Config
Extracted
njrat
0.7d
BDOCERT
oqbpregoqbpreg.ddns.net:5552
60bab2eed75ad3333f713f5b24bffad6
-
reg_key
60bab2eed75ad3333f713f5b24bffad6
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
3019ff465d9d7c657aa4e111da5212ffefa360d50a4586274bd38e067c7211f8.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ