Behavioral task
behavioral1
Sample
0x000b0000000122fe-56.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
0x000b0000000122fe-56.exe
Resource
win10v2004-20230220-en
General
-
Target
0x000b0000000122fe-56.dat
-
Size
27KB
-
MD5
46f1973b97feb0e43c5414e4391a04e3
-
SHA1
c6b2f5d7b95cb74aeaf32af4c8af02af507c771a
-
SHA256
34e60c6428c744f8e889f94714d011f59e67920a697aec4c1fcb9bc56e12e084
-
SHA512
10798f47d4cb6d8eccba0e8c71aa9587286116869fcfa1ea2f988e043dcd19470ffe3ade7da9bb8f2c091acf9efcd0bc2b82844447a7ca201bbce795e6f73087
-
SSDEEP
384:gLZEZ3ZfjHnGgk8QgLLwv6mxEP9AOWIMUAQk93vmhm7UMKmIEecKdbXTzm9bVhcV:+u31jHGqghUA/vMHTi9bD
Malware Config
Extracted
njrat
v4.0
Dangerous
positive-achieved.at.ply.gg:19202
Windows
-
reg_key
Windows
-
splitter
|-F-|
Signatures
-
Njrat family
Files
-
0x000b0000000122fe-56.dat.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ