Behavioral task
behavioral1
Sample
267f11aeaa62420506bf00912608fd80.exe
Resource
win7-20221111-en
General
-
Target
267f11aeaa62420506bf00912608fd80.exe
-
Size
93KB
-
MD5
267f11aeaa62420506bf00912608fd80
-
SHA1
a2c07492f065dce7f90665284ded763f6ab838e9
-
SHA256
792ad1aa7d042b3a51290003dd51befe14499c85103f02d75cb4a022e1713160
-
SHA512
5df1587b644b0cc48051a25a294b6aa1eaa8a9c453fa68bf1ffd5462771012d8abc8e0900227566450ee5d2341918df68dd3d73d8557ac1cfaae1cda34a41983
-
SSDEEP
1536:S5Kw0i6FHfpmcYM1t/2jEwzGi1dDDDPgS:S5oFHfpzYMj//i1dTo
Malware Config
Extracted
njrat
0.7d
ЛОХ
NC50Y3AuZXUubmdyb2suaW8Strik:MTE2MTA=
bf4b86d937e29b1b51011983fd5145bb
-
reg_key
bf4b86d937e29b1b51011983fd5145bb
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
267f11aeaa62420506bf00912608fd80.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ