Behavioral task
behavioral1
Sample
bd7f1a284fb8fb510637553ba596b675bb0dfd1673a16afe556a54bacee82cb6.exe
Resource
win7-20220901-en
General
-
Target
bd7f1a284fb8fb510637553ba596b675bb0dfd1673a16afe556a54bacee82cb6
-
Size
93KB
-
MD5
0e8867217262a922e9bb6474d9043f45
-
SHA1
ac640842f8eebf5d2f606bc942f9d627d56c9182
-
SHA256
bd7f1a284fb8fb510637553ba596b675bb0dfd1673a16afe556a54bacee82cb6
-
SHA512
3ffb02d1ceaf6872760b37a8151adadd3816a0e2e1edc4be26dbd01ac996d9040a7e6d4f68e11d1e4acd0edfb51a1bcff47b9ad0f557735a6b84417b0341b02b
-
SSDEEP
1536:1chSyh6zaoFjuFCVR5jEwzGi1dDzDfgS:1cKzaujuCRWi1dz4
Malware Config
Extracted
njrat
0.7d
nend
Ni50Y3AuZXUubmdyb2suaW8Strik:MTkzMDQ=
ac09b93a216fe349ae17a9b1caf8f5c3
-
reg_key
ac09b93a216fe349ae17a9b1caf8f5c3
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
bd7f1a284fb8fb510637553ba596b675bb0dfd1673a16afe556a54bacee82cb6.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ