Behavioral task
behavioral1
Sample
15a511cd0d9bb2c01af2005099bb980bf35941e73606ea16a740a25c555423e2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
15a511cd0d9bb2c01af2005099bb980bf35941e73606ea16a740a25c555423e2.exe
Resource
win10v2004-20220812-en
General
-
Target
15a511cd0d9bb2c01af2005099bb980bf35941e73606ea16a740a25c555423e2
-
Size
23KB
-
MD5
271cbf5d5af99f54c9e1a69fd79a3e00
-
SHA1
c00fe09a3e4f37eef0793c9ceb517baf1e901a73
-
SHA256
15a511cd0d9bb2c01af2005099bb980bf35941e73606ea16a740a25c555423e2
-
SHA512
15cc4181318d049563915b79136ecd115848abcbb2351a67f221eb7132c45ef7771d2333f2dda62ba61bee84202506fd13abd9abb954b47933ad94f545736818
-
SSDEEP
384:B8aLWS0dABLYVq6RxP8MDFF09EK564gRMmJKUv0mRvR6JZlbw8hqIusZzZbDly:SXcwt3FRpcnuS4
Malware Config
Extracted
njrat
0.7d
HacKed
127.0.0.1:1177
212683d986fb740ad6a40184df48e604
-
reg_key
212683d986fb740ad6a40184df48e604
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
15a511cd0d9bb2c01af2005099bb980bf35941e73606ea16a740a25c555423e2.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ