Behavioral task
behavioral1
Sample
8caf2cdb9f55db7d415d5548852466a1305deefeca7aef68811c67942e6e4b48.exe
Resource
win7-20221111-en
General
-
Target
8caf2cdb9f55db7d415d5548852466a1305deefeca7aef68811c67942e6e4b48
-
Size
23KB
-
MD5
5d7cd8256b80f9df46e90cf6e03642dc
-
SHA1
c90565b6e0088cf8f59fec9798dbb8aa34ada563
-
SHA256
8caf2cdb9f55db7d415d5548852466a1305deefeca7aef68811c67942e6e4b48
-
SHA512
85972c12d8e5c6fdebe183614409b18c6d362bf4892d7707652784e70715b70feac283d9f9e4083cc9373ce8cdaaa3d63add6de339dda7bbea2fc89152ed0652
-
SSDEEP
384:VY324bcgPiJLQrfARGSRUJsbY6ZgvSMBD3t8mRvR6JZlbw8hqIusZzZoa:qL2s+tRyRpcnuM
Malware Config
Extracted
njrat
0.7d
HacKed
soso.no-ip.biz:1177
5ac90351d487f8dd6fefe3132762f171
-
reg_key
5ac90351d487f8dd6fefe3132762f171
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
8caf2cdb9f55db7d415d5548852466a1305deefeca7aef68811c67942e6e4b48.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ