Behavioral task
behavioral1
Sample
5797e4cb9a2ce598a15b078f740cf090.exe
Resource
win7-20220812-en
General
-
Target
5797e4cb9a2ce598a15b078f740cf090.exe
-
Size
93KB
-
MD5
5797e4cb9a2ce598a15b078f740cf090
-
SHA1
527304a0acf68d6e3a721726776ace92143c8905
-
SHA256
e780ec7f4f62fe05042c51895a6ba639777b08c8f728beffa20314c6dc5c3e5e
-
SHA512
d613b2f78ed3325e47cdba4f6f9ac2d5fd3cdbd743602e832b53a2e6e03774c4652aa088c30beaffce3bfffbeef78cf0afd538533e0cea87343bd503d731b62a
-
SSDEEP
768:iY3nxYnkpjTMpALPGMtsas88EtNXhe9Y1mxCXxrjEtCdnl2pi1Rz4Rk3/sGdpNgM:txokVbPGHz88EbB1pjEwzGi1dDrDNgS
Malware Config
Extracted
njrat
0.7d
HacKed
Ni50Y3AuZXUubmdyb2suaW8Strik:MTQ1NDQg
7c8e3d010629f1bf8e953c23c3c62526
-
reg_key
7c8e3d010629f1bf8e953c23c3c62526
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
5797e4cb9a2ce598a15b078f740cf090.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ