Behavioral task
behavioral1
Sample
456dd0aec85b9c47a4efc2520aa85fb75ebfd4a081a658af103a79a9c307fb3f.exe
Resource
win7-20220812-en
General
-
Target
456dd0aec85b9c47a4efc2520aa85fb75ebfd4a081a658af103a79a9c307fb3f
-
Size
23KB
-
MD5
fb083c1e03b855e0260a409a1d118c9d
-
SHA1
50030c7f59eeb51c2f3d6606eb1832f6856539ea
-
SHA256
456dd0aec85b9c47a4efc2520aa85fb75ebfd4a081a658af103a79a9c307fb3f
-
SHA512
668659c0cf877ba186745919097ef0b15058a56bb0613d3a2c0b562bd89acb8293e4a34484cfe3ab4137ae71ab7cdf62beb19303d2f973196ab5de208dd1b068
-
SSDEEP
384:s+n2650N3qZbATcjRGC5Eo2D46OgnqUhay1ZmRvR6JZlbw8hqIusZzZKp:bm+71d5jRpcnut
Malware Config
Extracted
njrat
0.7d
new 2015
avgika.no-ip.biz:5552
6091f5b24a9dc8ff018023c9fd07ff4e
-
reg_key
6091f5b24a9dc8ff018023c9fd07ff4e
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
456dd0aec85b9c47a4efc2520aa85fb75ebfd4a081a658af103a79a9c307fb3f.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ