Behavioral task
behavioral1
Sample
2bdbbcf204b6075be6b8d4ecdd853a6b.exe
Resource
win7-20230220-en
General
-
Target
2bdbbcf204b6075be6b8d4ecdd853a6b.exe
-
Size
37KB
-
MD5
2bdbbcf204b6075be6b8d4ecdd853a6b
-
SHA1
108244ebaee0b10099615fa542397ce913f1ceaf
-
SHA256
c346077dad0342592db753fe2ab36d2f9f1c76e55cf8556fe5cda92897e99c7e
-
SHA512
5650016f20ece650cc7b0ea1390c62e6d8b6bb899bccb85b0fb36dbb9a6edd1c8b1f18f55bdcc56b7062beca0354c45790b51836e7fa420bf05cefc4dc52ca74
-
SSDEEP
384:lZmZZDj6iclri5Z7JAyk/m4uvBxZeaaPBrAF+rMRTyN/0L+EcoinblneHQM3epzk:aZLHJ7k/m4ubZraJrM+rMRa8Nuqxt
Malware Config
Extracted
njrat
im523
HacKed
if-prairie.at.ply.gg:22113
372599773d55ccbd00399b39b33a8b25
-
reg_key
372599773d55ccbd00399b39b33a8b25
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
2bdbbcf204b6075be6b8d4ecdd853a6b.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ