Behavioral task
behavioral1
Sample
d56e32393a65399b921eb6ab7aa3258ad2223312981a67ebb57a3708bf34cc3d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d56e32393a65399b921eb6ab7aa3258ad2223312981a67ebb57a3708bf34cc3d.exe
Resource
win10v2004-20221111-en
General
-
Target
d56e32393a65399b921eb6ab7aa3258ad2223312981a67ebb57a3708bf34cc3d
-
Size
23KB
-
MD5
09ea7d88b428e372efd8f27fa02d7980
-
SHA1
797c13dde489fa3501d404eb7955c4abfb7aa373
-
SHA256
d56e32393a65399b921eb6ab7aa3258ad2223312981a67ebb57a3708bf34cc3d
-
SHA512
1a5c70acbb169b8c02ef64b72c56cde7eeb6156e060b6f6f7cbfb9265297ef1ef180331f7c9046fc4184a5ec59157e519cb08fb3c6c5ceb4addad9372fda3c97
-
SSDEEP
384:O8aSyS9gB3Y1KIay2X8cLZI6XgxsGJVPpmRvR6JZlbw8hqIusZzZJ/:B589tXvRpcnu+
Malware Config
Extracted
njrat
0.7d
Anonymous_Lord
egyarmy12.ddns.net:1177
3554541cbc25b405083af0b35a603845
-
reg_key
3554541cbc25b405083af0b35a603845
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
d56e32393a65399b921eb6ab7aa3258ad2223312981a67ebb57a3708bf34cc3d.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ