Behavioral task
behavioral1
Sample
c79b8eaef85540f4e574162e51b4ef98.exe
Resource
win7-20221111-en
General
-
Target
c79b8eaef85540f4e574162e51b4ef98.exe
-
Size
225KB
-
MD5
c79b8eaef85540f4e574162e51b4ef98
-
SHA1
5636caa6dc5dbcdb296e4a6f9f59c7d64e675909
-
SHA256
a281865e116c45442f921963ea8f931c183776061b9e9dd7328f4a54f4f13b4b
-
SHA512
2cdec138fe5ee4453ef6019cac4551ec69aaf99b6eb31d7a50182a5ff1af22a14fed9eb858b6a9a9deb2cff502dff344bc6536d47d8be39ee9b40be8db329913
-
SSDEEP
3072:QF327h+yJvq/xr+VBFaImYIYiheeeeeeeeefYDeOiClppeppOpplppepppDppptf:832QfZrMBgJSOG9iO2RK
Malware Config
Extracted
njrat
im523
Desktop
6.tcp.eu.ngrok.io:10945
a197c9392c3d531e5c503c947b346f93
-
reg_key
a197c9392c3d531e5c503c947b346f93
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
c79b8eaef85540f4e574162e51b4ef98.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 189KB - Virtual size: 189KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ