Behavioral task
behavioral1
Sample
bJrn.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bJrn.exe
Resource
win10v2004-20221111-en
General
-
Target
bJrn.exe
-
Size
32KB
-
MD5
d9e8c553fd2b2384bd876b4acb9a92f0
-
SHA1
3a4c043620a05ae3f182a0b6f63ead3d82f941db
-
SHA256
fb9fdeb110ab64a155a610ecbdbaf7cc780d1c2dd1bb3cc9e544a13a56a992e2
-
SHA512
644de9db20c41f6f3d3375a601e9734874c6f898ddd731935c9d00c1d93029a0bfaa117524d9ac5114828ae7d92618fd93c840cfc9291025bb1fa20b29723132
-
SSDEEP
384:w0bUe5XB4e0XfOVcsw0Q0mS03AWTxtTUFQqzFWObbR:1T9Bu26555d8bR
Malware Config
Extracted
njrat
0.7NC
NYAN CAT
windowsii.duckdns.org:5552
6172d7787cb
-
reg_key
6172d7787cb
-
splitter
@!#&^%$
Signatures
-
Njrat family
Files
-
bJrn.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ