Behavioral task
behavioral1
Sample
94ddab9bf418a816979e7e1ad9dc43c71c00923c5f8f1ff80523e90f6c6947ae.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
94ddab9bf418a816979e7e1ad9dc43c71c00923c5f8f1ff80523e90f6c6947ae.exe
Resource
win10v2004-20220414-en
General
-
Target
94ddab9bf418a816979e7e1ad9dc43c71c00923c5f8f1ff80523e90f6c6947ae
-
Size
31KB
-
MD5
9d133a0834ae64b62ee98388ea870a02
-
SHA1
0d9bcb4560c22e36d304ca23c1b2bff757dd4ee0
-
SHA256
94ddab9bf418a816979e7e1ad9dc43c71c00923c5f8f1ff80523e90f6c6947ae
-
SHA512
5e95130a3b7f2de70a346b87dcca04a21b800efe5c2bb570b7affc61acd8009e363ba328354ff17fa48807fb739610bf79cea0cdd3e770dc90da64b3b3c2a3b8
-
SSDEEP
768:bBfFlStrFZczxX6aq4jG3VFf1vqDQmIDUu0tiWtcj:tyqZoFpcQVk7cj
Malware Config
Extracted
njrat
0.7d
username
helpmepls123.ddns.net:6522
997fb9a584520c7d72161d82bec2816f
-
reg_key
997fb9a584520c7d72161d82bec2816f
-
splitter
Y262SUCZ4UJJ
Signatures
-
Njrat family
Files
-
94ddab9bf418a816979e7e1ad9dc43c71c00923c5f8f1ff80523e90f6c6947ae.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ