Behavioral task
behavioral1
Sample
955d79a6df2f655a88d884cda7f0ac7f2d225c93bc5138bc8148d8c942717b8d.exe
Resource
win7-20220901-en
General
-
Target
955d79a6df2f655a88d884cda7f0ac7f2d225c93bc5138bc8148d8c942717b8d
-
Size
23KB
-
MD5
4944455e88fb3fce4e3d8b7504320149
-
SHA1
032f01bd48df9b0f89462353de8a48eb53c38faf
-
SHA256
955d79a6df2f655a88d884cda7f0ac7f2d225c93bc5138bc8148d8c942717b8d
-
SHA512
4b8c9f3565252233320f74613d4c71a66bfbd2f1508dfd18f61e09fcf6cf0bd6e71f5c1c23ff463809658a8641935a46d078e7e60f93d9eec260ba93d0cc36da
-
SSDEEP
384:cLY324bcgPiJLQrfARGSRUJsbY6ZgvSMBD3t8mRvR6JZlbw8hqIusZzZ/33:TL2s+tRyRpcnuYn
Malware Config
Extracted
njrat
0.7d
HacKed
abooddado.no-ip.info:1177
23c050d082f92fd766133abbcb3bd2cf
-
reg_key
23c050d082f92fd766133abbcb3bd2cf
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
955d79a6df2f655a88d884cda7f0ac7f2d225c93bc5138bc8148d8c942717b8d.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ