Behavioral task
behavioral1
Sample
920-55-0x0000000000150000-0x000000000016C000-memory.exe
Resource
win7-20230220-en
General
-
Target
920-55-0x0000000000150000-0x000000000016C000-memory.dmp
-
Size
112KB
-
MD5
6bf92ac881f8bcf056d86806f358f2ad
-
SHA1
f0576d75b587612fb22137757c0486103e05eec1
-
SHA256
ba38db076db9709a7b5e70a9a81ce2b1116800e60951006c4c5f4534fd55f16d
-
SHA512
a39557f3359dbd072234de4f22da937687bac992ce2182bdd39ef2cbd3f052d7c238f82ebd908291e24eb54f9937a22be62bbfc20e0e2c9d4213c55fe4da4c04
-
SSDEEP
768:zY3rETnkpjTMpALPGMtsas88EtNXhU9f1mxCXxrjEtCdnl2pi1Rz4Rk3BsGdpVgM:6E7kVbPGHz88EbE1pjEwzGi1dDRDVgS
Malware Config
Extracted
njrat
0.7d
HacKed
Zm9ycnV4eC5kZG5zLm5ldAStrikStrik:OTA5MA==
30bf20a7c4c21398efee41949036ac7b
-
reg_key
30bf20a7c4c21398efee41949036ac7b
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
920-55-0x0000000000150000-0x000000000016C000-memory.dmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ