Behavioral task
behavioral1
Sample
bK5A.exe
Resource
win7-20230220-en
General
-
Target
bK5A.exe
-
Size
23KB
-
MD5
a55ad693e9909eab198f2f873939ba6f
-
SHA1
28af68d8abcecf08c677449892ca5434a73ccb9f
-
SHA256
27d7942099c932c0091ae518341193d28d06ac7b5efe0b548499be25217f046f
-
SHA512
5ce2be5c0363d4e051c20e33f7bee8314d477fcb8348a760147ef5021112aa526ae8ed7e4e23c70e9b54808a6fdad64cfba058e5342f39a1908f220a1ed08f2f
-
SSDEEP
384:H+n2650N3qZbATcjRGC5Eo9D46BgnqUhay1ZmRvR6JZlbw8hqIusZzZbP:gm+71d5XRpcnuo
Malware Config
Extracted
njrat
0.7d
HacKed
7.tcp.eu.ngrok.io:10930
9e1d76f980dcbeb3169aabd93be87618
-
reg_key
9e1d76f980dcbeb3169aabd93be87618
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
bK5A.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ