Behavioral task
behavioral1
Sample
121df38e767b1b2b97511a9edebe0023462cba685ea27b8f8776bd2304fcfb9e.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
121df38e767b1b2b97511a9edebe0023462cba685ea27b8f8776bd2304fcfb9e.exe
Resource
win10v2004-20220414-en
General
-
Target
121df38e767b1b2b97511a9edebe0023462cba685ea27b8f8776bd2304fcfb9e
-
Size
29KB
-
MD5
b4f97e12a60f4f5c9a7a70faa5a7b092
-
SHA1
a83f6c40df8f95bd7f6f09b092dc6577b8008fff
-
SHA256
121df38e767b1b2b97511a9edebe0023462cba685ea27b8f8776bd2304fcfb9e
-
SHA512
39559be30f2155a0040ea9e39edde34f6fb95d8c65efecb59887c78b5905301d4f652957b15c657f293574e4cde8d6e203bf18ef90b3d7666b61284a431ccb5c
-
SSDEEP
384:fHhkrLGN8fNl7L5H4yAyr9N95jv8CumqDM1TeHdGBsbh0w4wlAokw9OhgOL1vYRD:f+7R4yAyrR8MqYTeEBKh0p29SgR6cl
Malware Config
Extracted
njrat
0.6.4
HacKed
joao2412.ddns.net:1177
81ed0e74a40ed4fe8a36a7b819c4279f
-
reg_key
81ed0e74a40ed4fe8a36a7b819c4279f
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
121df38e767b1b2b97511a9edebe0023462cba685ea27b8f8776bd2304fcfb9e.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ