Behavioral task
behavioral1
Sample
cb05fb89cbd0d4bef63a8305b8d2682a5182a1e0683f3fc8bcaa5b21a242bdcc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cb05fb89cbd0d4bef63a8305b8d2682a5182a1e0683f3fc8bcaa5b21a242bdcc.exe
Resource
win10v2004-20221111-en
General
-
Target
cb05fb89cbd0d4bef63a8305b8d2682a5182a1e0683f3fc8bcaa5b21a242bdcc
-
Size
23KB
-
MD5
c7206628e16c9d9e4ad317d61802f643
-
SHA1
fbd3bb26dd93ca1f53eb4d5c31a56b21f7a98180
-
SHA256
cb05fb89cbd0d4bef63a8305b8d2682a5182a1e0683f3fc8bcaa5b21a242bdcc
-
SHA512
70024aae27d8df0dd4a53a6d5fbc02aa6f676f3cbbb9216227a866134ceb1b842e2c19ce9948b5a661f5419b9463083c8cdad3a39ad3b4ae1273332fb7ca9379
-
SSDEEP
384:Z5Q+SAN7uprgvM5OSUswZXg69gbm4hfpFmRvR6JZlbw8hqIusZzZw9I:Z+OaxVULRpcnu2
Malware Config
Extracted
njrat
0.7d
Hacked
updaterwindows.ddns.net:4655
4f52649468003ebaeb5e09efbe9b562c
-
reg_key
4f52649468003ebaeb5e09efbe9b562c
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
cb05fb89cbd0d4bef63a8305b8d2682a5182a1e0683f3fc8bcaa5b21a242bdcc.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ