Behavioral task
behavioral1
Sample
048f1dfb0121faf2121cdb991df5fbfdc90e5d6ad7a9ad969e4fed3c42c5036b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
048f1dfb0121faf2121cdb991df5fbfdc90e5d6ad7a9ad969e4fed3c42c5036b.exe
Resource
win10v2004-20221111-en
General
-
Target
048f1dfb0121faf2121cdb991df5fbfdc90e5d6ad7a9ad969e4fed3c42c5036b
-
Size
29KB
-
MD5
f10c8b1f0f97960459e9738dac45d819
-
SHA1
db0bfbff278d3fba3854b04594a0f19b819508d5
-
SHA256
048f1dfb0121faf2121cdb991df5fbfdc90e5d6ad7a9ad969e4fed3c42c5036b
-
SHA512
cd4260d81bea17234c62b902e013dace99308854895cc648b2f1b75e67d778a56b7cac6a2301e32811079dbb7237198dd2344eafac4eed379979dc9bce94cad9
-
SSDEEP
768:opc1k75kraWTOflzsqkreyBKh0p29SgR8+:U75x4FHKhG29j8+
Malware Config
Extracted
njrat
0.6.4
CΞDΚΛΝ
c4cerrah.dyndns.org:500
72a32bac172faf8e6bceafac1b9afc70
-
reg_key
72a32bac172faf8e6bceafac1b9afc70
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
048f1dfb0121faf2121cdb991df5fbfdc90e5d6ad7a9ad969e4fed3c42c5036b.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ