Behavioral task
behavioral1
Sample
cd209e93f1c078e5028578e7600c9679bda940dfe858c44b0686759656b73dca.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cd209e93f1c078e5028578e7600c9679bda940dfe858c44b0686759656b73dca.exe
Resource
win10v2004-20220812-en
General
-
Target
cd209e93f1c078e5028578e7600c9679bda940dfe858c44b0686759656b73dca
-
Size
28KB
-
MD5
45119c3cb5f1690d54f0798f4bcc88d0
-
SHA1
1b4db86c2124ef1885bd4d2103debfbc7030ad84
-
SHA256
cd209e93f1c078e5028578e7600c9679bda940dfe858c44b0686759656b73dca
-
SHA512
f23d83ce8ce8523bd96a38ef04d2909758bdac47a941a270e4632cae202207aa7c0f2765437ee3c41e2e33a7da439fb9a61fe4fc6a0be94260378ba8d8a83b62
-
SSDEEP
768:rz7GMroynRJHwCPIQEe+BKh0p29SgRcl:rz7G8vQ5Q2KhG29jcl
Malware Config
Extracted
njrat
0.6.4
Error
lioualioualioua.ddns.net:1997
f71840956245e1aacae9cdc2eefacd35
-
reg_key
f71840956245e1aacae9cdc2eefacd35
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
cd209e93f1c078e5028578e7600c9679bda940dfe858c44b0686759656b73dca.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ