Behavioral task
behavioral1
Sample
1db504f6bb81adc9558f57bebcc2cbaced40418cee77c9d357498bab43495476.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1db504f6bb81adc9558f57bebcc2cbaced40418cee77c9d357498bab43495476.exe
Resource
win10v2004-20221111-en
General
-
Target
1db504f6bb81adc9558f57bebcc2cbaced40418cee77c9d357498bab43495476
-
Size
23KB
-
MD5
e1da4538a1f6277231f4fae3873e2eff
-
SHA1
696a4b4e3049dff86672702a3d61b5ceeac5922d
-
SHA256
1db504f6bb81adc9558f57bebcc2cbaced40418cee77c9d357498bab43495476
-
SHA512
bfa62586a9c941dacb29ec2858102dd0e52416d05b129c9c860d5c51e8bc48bdd7a441b022e413bb9833c066c3923b8ebf0d0a8e691f66171114105b0dc6ea3b
-
SSDEEP
384:Lwz6+T4IjWZFNwXU0eiNUBdvt6lgT+lLOhXxQmRvR6JZlbw8hqIusZzZ03:ATbC81NgRpcnul
Malware Config
Extracted
njrat
0.7d
HacKed
zcvtyug.linkpc.net:5552
8f877bbab863729079309ea4382911ed
-
reg_key
8f877bbab863729079309ea4382911ed
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
1db504f6bb81adc9558f57bebcc2cbaced40418cee77c9d357498bab43495476.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ