Behavioral task
behavioral1
Sample
6f77e6bb5e73f2b3fb3c29e91fc396d7b534378e0d8ebbeba4d97dd776bf743e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6f77e6bb5e73f2b3fb3c29e91fc396d7b534378e0d8ebbeba4d97dd776bf743e.exe
Resource
win10v2004-20221111-en
General
-
Target
6f77e6bb5e73f2b3fb3c29e91fc396d7b534378e0d8ebbeba4d97dd776bf743e
-
Size
23KB
-
MD5
a30beb50f69d226d76c7d4c69b341b47
-
SHA1
ac5a3324495fd1fe88c7ef2e06a2567b90b8b9fb
-
SHA256
6f77e6bb5e73f2b3fb3c29e91fc396d7b534378e0d8ebbeba4d97dd776bf743e
-
SHA512
001e7cfdedc71cf8aa625b68c6b1f7f58bd029c99b47d7ea0d4ae09d82d529e106eafd26e2c6784b0f9e512642dc42914f9ddc52037bb88aaa89b9a76e607c32
-
SSDEEP
384:poWtkEwn65rgjAsGipk55D16xgXakhbZD0mRvR6JZlbw8hqIusZzZA3:+7O89p2rRpcnuZ
Malware Config
Extracted
njrat
0.7d
asd
shker.ddns.net:1177
82e3f507b111beb7b4c0adf2e82447ca
-
reg_key
82e3f507b111beb7b4c0adf2e82447ca
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
6f77e6bb5e73f2b3fb3c29e91fc396d7b534378e0d8ebbeba4d97dd776bf743e.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ