Behavioral task
behavioral1
Sample
6e1ebf0254015cbfe98dc308aaa75dd346309633e179f812174e564fb4b648ec.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6e1ebf0254015cbfe98dc308aaa75dd346309633e179f812174e564fb4b648ec.exe
Resource
win10v2004-20220812-en
General
-
Target
6e1ebf0254015cbfe98dc308aaa75dd346309633e179f812174e564fb4b648ec.exe
-
Size
27KB
-
MD5
a1a64f8671681ba96b48cfd025a42449
-
SHA1
13369f1d952151f24a50ab3506ad1541677f46e3
-
SHA256
6e1ebf0254015cbfe98dc308aaa75dd346309633e179f812174e564fb4b648ec
-
SHA512
d8fb283df634142ddb696dcfe82fa7530cf0a1cdf35cafed29a45c4de27db799014ba3fdec1ef8226bd28f6ebd3856ba1d7518f1789a6bc0dac8521fc60a0bb6
-
SSDEEP
384:EL0M2XwBNOaLNOFs/Av2yeCP1BBvMl7AQk93vmhm7UMKmIEecKdbXTzm9bVhcaSy:St220U0Wl7A/vMHTi9bD
Malware Config
Extracted
njrat
v2.0
Oliver
3.126.224.214:19586
Windows
-
reg_key
Windows
-
splitter
|-F-|
Signatures
-
Njrat family
Files
-
6e1ebf0254015cbfe98dc308aaa75dd346309633e179f812174e564fb4b648ec.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ