Behavioral task
behavioral1
Sample
5f83d60717c1b6bd8c17a9180fcbdbe90fbe101b85e2647603551f5f5b79fc39.exe
Resource
win7-20220901-en
General
-
Target
5f83d60717c1b6bd8c17a9180fcbdbe90fbe101b85e2647603551f5f5b79fc39
-
Size
29KB
-
MD5
28e6e183ad5e85c564b3c159cfce8bcf
-
SHA1
a5fcbdf62588ec083dbb819996698d525c71d972
-
SHA256
5f83d60717c1b6bd8c17a9180fcbdbe90fbe101b85e2647603551f5f5b79fc39
-
SHA512
01a39cb64692b6ba158371a4830f9c78e802cff91bb57b396d88a001b3a4a1b1d53535b719091661c072e9c458788100d85568a8b678d7c85742268f9879de17
-
SSDEEP
384:ZTUHEBl7p3hUw2s7hv55gEKemqDSqre/IDGBsbh0w4wlAokw9OhgOL1vYRGOZz/V:ZH7bUw2CtkEcqNreHBKh0p29SgRZL
Malware Config
Extracted
njrat
0.6.4
#OuT
unkdamas7.ddns.net:1177
12ce4e06a81e8d54fd01d9b762f1b1bb
-
reg_key
12ce4e06a81e8d54fd01d9b762f1b1bb
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
5f83d60717c1b6bd8c17a9180fcbdbe90fbe101b85e2647603551f5f5b79fc39.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ