Behavioral task
behavioral1
Sample
04b38feaaa4a1f9418a704d6f08ffa78.exe
Resource
win7-20221111-en
General
-
Target
04b38feaaa4a1f9418a704d6f08ffa78.exe
-
Size
93KB
-
MD5
04b38feaaa4a1f9418a704d6f08ffa78
-
SHA1
98f6c18c403e2663ef1d9682f298fb3a96f31cff
-
SHA256
ca54f1525a6b447190d59b79e65f1841f752849d45bd3cb57b033055d054728c
-
SHA512
67490122d421cf46119ce5f751c505424c624671daa9f65233b142f3daf76bbe4ef13d5734017ed5bb9c899834bd50b0e26fdda60a69988cbd28dc8b74663aaf
-
SSDEEP
1536:+eQYW6qbkW8aVpO1XRkoojEwzGi1dDVDOgS:+eE8aVpOxSCi1dZz
Malware Config
Extracted
njrat
0.7d
HacKed
FRANSESCOi50Y3AuZXUubmdyb2suaW8Strik:MTQ3OTQ=
a51c0ec96495ab1af1dba6c0afa0dddc
-
reg_key
a51c0ec96495ab1af1dba6c0afa0dddc
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
04b38feaaa4a1f9418a704d6f08ffa78.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ