Behavioral task
behavioral1
Sample
bcf3147000ac719df05387e1d1fcb8a0ad1899f228531b8c43d191f8844e2b2c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bcf3147000ac719df05387e1d1fcb8a0ad1899f228531b8c43d191f8844e2b2c.exe
Resource
win10v2004-20220901-en
General
-
Target
bcf3147000ac719df05387e1d1fcb8a0ad1899f228531b8c43d191f8844e2b2c
-
Size
23KB
-
MD5
da6e2c75a0971b2e9da7b5d686f3d4c8
-
SHA1
49b78c2a36a53bd65790fead87f0cb003d6a7132
-
SHA256
bcf3147000ac719df05387e1d1fcb8a0ad1899f228531b8c43d191f8844e2b2c
-
SHA512
c44bfc2d6bbd20890fc4b0b3ad2a1def177cc9cadc3364dec685f6a7faf84e0188b03bfce8471ab56d4bbd56afca18c536a1a0f041b2b340088428249aaa46ee
-
SSDEEP
384:hQeCo2zmZbQHkJeCdUwBvQ61gjuQBnB9mRvR6JZlbw8hqIusZzZJvp:25yBVd7RpcnuWR
Malware Config
Extracted
njrat
0.7d
HacKed
xvirus11.no-ip.biz:3444
9f53d27506e18546416f41919d613801
-
reg_key
9f53d27506e18546416f41919d613801
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
bcf3147000ac719df05387e1d1fcb8a0ad1899f228531b8c43d191f8844e2b2c.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ