Behavioral task
behavioral1
Sample
1102b76e764dbb7e3978258f47eeaaee10429ba18de626d116913056185c35e4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1102b76e764dbb7e3978258f47eeaaee10429ba18de626d116913056185c35e4.exe
Resource
win10v2004-20220812-en
General
-
Target
1102b76e764dbb7e3978258f47eeaaee10429ba18de626d116913056185c35e4
-
Size
23KB
-
MD5
21dab2d70a43dc5b058f6e711f4c8526
-
SHA1
0b6080334661692c432eb36a0a4e19b240d6b936
-
SHA256
1102b76e764dbb7e3978258f47eeaaee10429ba18de626d116913056185c35e4
-
SHA512
fb597f271298d6b8eb89969db7d6c8d5891f049525cf219eca96bb6f45e817bf9350bf5307d59b61092d4463818c99ceccec3ae4f14247fbd2c1431980b10317
-
SSDEEP
384:PzRWKCWs5Mx/YZPxvnjmQdFxH84GlQ6rgdAyZxLdmRvR6JZlbw8hqIusZzZNpa:PtmXAOvnjDdF9cRpcnud
Malware Config
Extracted
njrat
0.7d
BetaBotHERE
mytest12.no-ip.biz:1606
6f09905a9ba4915313ad7f7f5a7f11b9
-
reg_key
6f09905a9ba4915313ad7f7f5a7f11b9
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
1102b76e764dbb7e3978258f47eeaaee10429ba18de626d116913056185c35e4.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ