Behavioral task
behavioral1
Sample
76c5e5d3893b312b27bf0f47c69d5fb79cb848e9cd63d4a387c9530ab4e754b7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
76c5e5d3893b312b27bf0f47c69d5fb79cb848e9cd63d4a387c9530ab4e754b7.exe
Resource
win10v2004-20220901-en
General
-
Target
76c5e5d3893b312b27bf0f47c69d5fb79cb848e9cd63d4a387c9530ab4e754b7
-
Size
56KB
-
MD5
3135921e7f4a063d4e55c368d77ac590
-
SHA1
2cac47933b148fd530de3e655037e5929d2b0bb6
-
SHA256
76c5e5d3893b312b27bf0f47c69d5fb79cb848e9cd63d4a387c9530ab4e754b7
-
SHA512
20ed0f472796ba5672e76c4d4871e3426341bdf5811fb884121a346b04cfc19f88b195a0ffd6031ddeffe38de9c1e4fa5ef08872022b791efd1ec165b1e75c32
-
SSDEEP
1536:B7nSQtD7KhG29j+58zYAIF8J6k00axNRdPK7Oem0:9SYKA29ZzYxF84k0rxNXK7
Malware Config
Extracted
njrat
0.6.4
HacKed
ma20092009.zapto.org:1177
5cd8f17f4086744065eb0992a09e05a2
-
reg_key
5cd8f17f4086744065eb0992a09e05a2
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
76c5e5d3893b312b27bf0f47c69d5fb79cb848e9cd63d4a387c9530ab4e754b7.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 27KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ltyrfnk Size: - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE