Behavioral task
behavioral1
Sample
b76c306555758842c5ac0b225cf691e74f6b00bc557d59f3ef1e26a1da9ccb30.exe
Resource
win7-20220812-en
General
-
Target
b76c306555758842c5ac0b225cf691e74f6b00bc557d59f3ef1e26a1da9ccb30
-
Size
29KB
-
MD5
50ca65d9ffa021117d59aadcb728c010
-
SHA1
adfe0be4770bf13da68a1e73d9b66a417b8b98eb
-
SHA256
b76c306555758842c5ac0b225cf691e74f6b00bc557d59f3ef1e26a1da9ccb30
-
SHA512
f28696963fc15d57341c5df22997b09453afa1cfd7c42293967e3afacd920656726307518b3fb7a6c71e377fb19df27cd3e47c3b5978d18da5b1a78a2035a9b6
-
SSDEEP
384:JhQXpl7dzns8oDw/LRP55/4GWmqDSeXegLGBsbh0w4wlAokw9OhgOL1vYRGOZzJc:JE7Js8oDSJz4wqZXenBKh0p29SgRxG/
Malware Config
Extracted
njrat
0.6.4
EEEEE
skoon123.no-ip.biz:1188
d5a38e9b5f206c41f8851bf04a251d26
-
reg_key
d5a38e9b5f206c41f8851bf04a251d26
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
b76c306555758842c5ac0b225cf691e74f6b00bc557d59f3ef1e26a1da9ccb30.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ