Behavioral task
behavioral1
Sample
cfcee11e3100662568f6dc68a1058a7e.exe
Resource
win7-20230220-en
General
-
Target
cfcee11e3100662568f6dc68a1058a7e.exe
-
Size
93KB
-
MD5
cfcee11e3100662568f6dc68a1058a7e
-
SHA1
c8662a4be2b73a1e45f54a55bf0c627b9f4965c7
-
SHA256
3b0dd3f9dfc4302b9965dbed206dbd381aef984f1302cfeb9f1709a0fec7f3fc
-
SHA512
daecdf1bd0e4e1d43b64d36c094c9bed135a54aec847510c6b34d8deb4752db9e3a8e8456445b88de3ee0dc354f94f8f3cea9d74bcf73c48d4f9351229e76abe
-
SSDEEP
1536:Hm0YeVBvb5Lncb1AG8jEwzGi1dD+DQgS:Hm8Bvb57cBbdi1dY5
Malware Config
Extracted
njrat
0.7d
LOX
NC50Y3AuZXUubmdyb2suaW8Strik:MTc1Mzg=
84211ece177abd5f84de6311a704f29d
-
reg_key
84211ece177abd5f84de6311a704f29d
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
cfcee11e3100662568f6dc68a1058a7e.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ