Behavioral task
behavioral1
Sample
1c19708543339f4d5c23b6acaed9df363579ae8ac01fa65767d998370025afb8.exe
Resource
win7-20220901-en
General
-
Target
1c19708543339f4d5c23b6acaed9df363579ae8ac01fa65767d998370025afb8
-
Size
23KB
-
MD5
f6512b5266013cbb08aa3202fc08558a
-
SHA1
5035b950ff48d6d2443ff7af0f5971d203403a96
-
SHA256
1c19708543339f4d5c23b6acaed9df363579ae8ac01fa65767d998370025afb8
-
SHA512
5edd6431e83baae442f43f94036fdd365092f5c43674ce4fed69da95c5e1a02836d2ceceb6ee517f0cec25edbde7601950599fa8a625a2890cfdac7e8f05608c
-
SSDEEP
384:7Y324bcgPiJLQrfARGSRUJsbY6ZgvSMBD3t8mRvR6JZlbw8hqIusZzZJj:EL2s+tRyRpcnuW
Malware Config
Extracted
njrat
0.7d
Slave
test333.no-ip.org:1607
81f769f67414fd11a4780d578c67b88a
-
reg_key
81f769f67414fd11a4780d578c67b88a
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
1c19708543339f4d5c23b6acaed9df363579ae8ac01fa65767d998370025afb8.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ