Behavioral task
behavioral1
Sample
a681243f81bb5709ab90135baa68387a74e5fb21cfce55cbb9813d531cd63e47.exe
Resource
win7-20220901-en
General
-
Target
a681243f81bb5709ab90135baa68387a74e5fb21cfce55cbb9813d531cd63e47
-
Size
23KB
-
MD5
4e6ca33b19ebb644f9248098e9701813
-
SHA1
29dc098ac8613b2726f785f987fdcbfaa0765da7
-
SHA256
a681243f81bb5709ab90135baa68387a74e5fb21cfce55cbb9813d531cd63e47
-
SHA512
b8490195dbb94ab32a6455b879ff3cd3097fe060c1bf3c3e6a53e551d2c07dbd917eb4b739bcc2f36fa62da920e4bbb6f83d55bd7cbb22be28885b774bfe44c5
-
SSDEEP
384:+OMqMKyOkBkRbohza8yuTUt7u06zgV4a5pzomRvR6JZlbw8hqIusZzZ/Z:+OQ/YI1T0Rpcnu6
Malware Config
Extracted
njrat
0.7d
Victim
127.0.0.1:1212
6df42d2ac08496e527eea0f3fa3929c1
-
reg_key
6df42d2ac08496e527eea0f3fa3929c1
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
a681243f81bb5709ab90135baa68387a74e5fb21cfce55cbb9813d531cd63e47.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ