Behavioral task
behavioral1
Sample
e9bda0c9ea9baeae1d88efcd36064a27c8998bb1cd409d08215d7dd6f43a054b.exe
Resource
win7-20221111-en
General
-
Target
e9bda0c9ea9baeae1d88efcd36064a27c8998bb1cd409d08215d7dd6f43a054b
-
Size
23KB
-
MD5
44818e08213bdbbfe7652ced25dc8888
-
SHA1
10ab9090d763432a3dbfca0d61bd8cc39af57977
-
SHA256
e9bda0c9ea9baeae1d88efcd36064a27c8998bb1cd409d08215d7dd6f43a054b
-
SHA512
9c1b6c2abe9fd87b3c5f5534a941f76555c1669cbb7e499d2d2f1382b007a1e4a2c16f7b2c49cb18d955b71e2e6f0ec0a8163e18f507a8c87ac52c0764f7cf54
-
SSDEEP
384:yc6ze6e1PAhJVzC3tC1im/BsTx46PgZ0rap9HBmRvR6JZlbw8hqIusZzZD1:Se9EJLN/yRpcnu+
Malware Config
Extracted
njrat
0.7d
HacKed
217.89.106.104:3333
8124f726359c170d3decc3f8cea64310
-
reg_key
8124f726359c170d3decc3f8cea64310
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
e9bda0c9ea9baeae1d88efcd36064a27c8998bb1cd409d08215d7dd6f43a054b.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ