Behavioral task
behavioral1
Sample
27a84218eaf5bc8a68f571776ba57c1f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
27a84218eaf5bc8a68f571776ba57c1f.exe
Resource
win10v2004-20221111-en
General
-
Target
27a84218eaf5bc8a68f571776ba57c1f.exe
-
Size
48KB
-
MD5
27a84218eaf5bc8a68f571776ba57c1f
-
SHA1
16ebd5bae1954473ef8c7d9a364abfc832b4bcad
-
SHA256
48aab1c694a3bd849241df0849c3a9db84301913d60d9bb8d50b869486967821
-
SHA512
10779eab6326f71b4ab327d18a7389c660448c04f7bbae6da8bdcf798001744eb221ecec7d8cde0584e000b3562b3a413c524125f3b5f78922fc1c951fff6fc0
-
SSDEEP
384:T0bUe5XB4e0XOOpa8784W+ozcwWTbtTUFQqz9GObbZ:AT9BuN7784hRkbZ
Malware Config
Extracted
njrat
0.7NC
NYAN CAT
seznam.zapto.org:5050
341fa919be
-
reg_key
341fa919be
-
splitter
@!#&^%$
Signatures
-
Njrat family
Files
-
27a84218eaf5bc8a68f571776ba57c1f.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 648B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ