Behavioral task
behavioral1
Sample
1ca127bec60b2ebaddb0e8d65e1a1f2792d6471b203aaa640a5ea2199dfa17fe.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1ca127bec60b2ebaddb0e8d65e1a1f2792d6471b203aaa640a5ea2199dfa17fe.exe
Resource
win10v2004-20221111-en
General
-
Target
1ca127bec60b2ebaddb0e8d65e1a1f2792d6471b203aaa640a5ea2199dfa17fe
-
Size
23KB
-
MD5
28cdabd71d6e17e5da44fcb1903b8f0a
-
SHA1
099c57da5eb0ffae5372033780760c11d56d5774
-
SHA256
1ca127bec60b2ebaddb0e8d65e1a1f2792d6471b203aaa640a5ea2199dfa17fe
-
SHA512
b42ceb3e50ed1680da80d1f7673ed852cbdc24bf0c2f28bcf81759d3082aee19c91c8ab0dd2b5dc138e3792c4a25468a07d9b68be04db3c7855121cd3019c67c
-
SSDEEP
384:1/oWSkWHa55BgDVRGipkItzY6vZg36Eh7FpmRvR6JZlbw8hqIusZzZyR:1YJuk9pHRpcnuF
Malware Config
Extracted
njrat
0.7d
Client
masterplanc1ty.ddns.net:1177
e998a1b4ded4a0f63554a6d38f9ab495
-
reg_key
e998a1b4ded4a0f63554a6d38f9ab495
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
1ca127bec60b2ebaddb0e8d65e1a1f2792d6471b203aaa640a5ea2199dfa17fe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ