Behavioral task
behavioral1
Sample
09bbbb95d2e619f119b2f543479ee714caddf4a8231d7e4f515c58bb99589e7a.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
09bbbb95d2e619f119b2f543479ee714caddf4a8231d7e4f515c58bb99589e7a.exe
Resource
win10v2004-20220414-en
General
-
Target
09bbbb95d2e619f119b2f543479ee714caddf4a8231d7e4f515c58bb99589e7a
-
Size
43KB
-
MD5
f59e59fa5f98efd36fdadcf78707b820
-
SHA1
0e3d922da4a73c76acc7fdc2623008e3654d51db
-
SHA256
09bbbb95d2e619f119b2f543479ee714caddf4a8231d7e4f515c58bb99589e7a
-
SHA512
f37fa532bfd682d583e17e59c31aba1cc597bd10cc2deaaef81bdf5d86213b3ea0b41739825bba7b7ad9c62edc7d9dbd996bbbb003129957a30ae2841140a3b5
-
SSDEEP
384:dZyeeXN0Vyoy77d6kr9EicEhz5uuzDgIij+ZsNO3PlpJKkkjh/TzF7pWnl/greTb:XbEKgl/Qkr9/N1uXQ/oA/+L
Malware Config
Extracted
njrat
Njrat 0.7 Golden By Hassan Amiri
HacKed
wkipir1cfg.ddns.net:7777
Windows Update
-
reg_key
Windows Update
-
splitter
|Hassan|
Signatures
-
Njrat family
Files
-
09bbbb95d2e619f119b2f543479ee714caddf4a8231d7e4f515c58bb99589e7a.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ