Behavioral task
behavioral1
Sample
a0d3578831e742e5669498bca479049f.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
a0d3578831e742e5669498bca479049f.exe
Resource
win10v2004-20230220-en
General
-
Target
a0d3578831e742e5669498bca479049f.exe
-
Size
31KB
-
MD5
a0d3578831e742e5669498bca479049f
-
SHA1
30f28f6cba45e178553c55a3fc64788bb74c7356
-
SHA256
40b1b85b59abf671afa0a0cfc50fed43e3f99983dcb74f2a54e7f0b4e2a40359
-
SHA512
267f722712e4c46a582e9f29b38d5140eef710ad42a43fb201113ad95b0ace57fffe816404c6b27b99e2e6557312d9f02f6ad4d077760e9982866fb4d6c18c8c
-
SSDEEP
768:83woAkZlH/azx1+tQiqvG97v6MQmIDUu0ti/yj:R4qepvQVkHj
Malware Config
Extracted
njrat
0.7d
MyBot
212.227.197.141:5761
aaee8e76c084675a4046a9bc6991fdaf
-
reg_key
aaee8e76c084675a4046a9bc6991fdaf
-
splitter
Y262SUCZ4UJJ
Signatures
-
Njrat family
Files
-
a0d3578831e742e5669498bca479049f.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ