Behavioral task
behavioral1
Sample
befdffeff1a7eea24adc79ede80aca075fa8db5a27eee3b88c9ee6d781778f4b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
befdffeff1a7eea24adc79ede80aca075fa8db5a27eee3b88c9ee6d781778f4b.exe
Resource
win10v2004-20221111-en
General
-
Target
befdffeff1a7eea24adc79ede80aca075fa8db5a27eee3b88c9ee6d781778f4b
-
Size
23KB
-
MD5
3c99e7f2548f0643bad8f806d5fb3e2c
-
SHA1
eb8e45a35662b4bbcedeb75a2cae2fd151cb2470
-
SHA256
befdffeff1a7eea24adc79ede80aca075fa8db5a27eee3b88c9ee6d781778f4b
-
SHA512
1af187d376ed64aa398427254d0c1ae7af1bd7793bb9c0d26f20cfb3918f0ae7b3b6606411e2ec205ee67ee87f9911fcc7ec95d90294dd58b0b9b66ef63f4d20
-
SSDEEP
384:YQ+ILghbOpMgPJ5OSEKw53g6dg7GYh/JlmRvR6JZlbw8hqIusZzZDc:/S6bVEVRpcnuL
Malware Config
Extracted
njrat
0.7d
HacKed
cswdakchitaya3jbni.servecounterstrike.com:400
8222eaf22733a48512528c733322fad8
-
reg_key
8222eaf22733a48512528c733322fad8
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
befdffeff1a7eea24adc79ede80aca075fa8db5a27eee3b88c9ee6d781778f4b.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ