Behavioral task
behavioral1
Sample
a45cb147b40eb0d1402e3d6513346b5f993a7e271bc6ddb4c4d17d600aa94f4b.exe
Resource
win7-20221111-en
General
-
Target
a45cb147b40eb0d1402e3d6513346b5f993a7e271bc6ddb4c4d17d600aa94f4b
-
Size
22KB
-
MD5
2b3d8e8c7f1883d941b3916753f082ec
-
SHA1
a89e406add29ee35ce45fa9d309093a30b2ab2df
-
SHA256
a45cb147b40eb0d1402e3d6513346b5f993a7e271bc6ddb4c4d17d600aa94f4b
-
SHA512
a9c2ee135098f03838d703f3a61629866044144410e28ae690ff165a8f1e1a5e88aa82e7aef0b55ed2128c6ecb0d4cac778be89d3974d7d66d0a76427487358d
-
SSDEEP
384:jY324bcgPiJLQrfARGSRUJsbY6ZgvSMBD3t8mRvR6JZlbw8hqIusZzZ6z:sL2s+tRyRpcnu/
Malware Config
Extracted
njrat
0.7d
HacKed
h2opvping.no-ip.org:5552
aeddff979392006d000e768fa710613a
-
reg_key
aeddff979392006d000e768fa710613a
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
a45cb147b40eb0d1402e3d6513346b5f993a7e271bc6ddb4c4d17d600aa94f4b.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ