Static task
static1
Behavioral task
behavioral1
Sample
b39589d6427aa2666b54f1b09cfeae25fd62c135293688cc91e854ac3097a898.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
b39589d6427aa2666b54f1b09cfeae25fd62c135293688cc91e854ac3097a898.exe
Resource
win10v2004-20220414-en
General
-
Target
b39589d6427aa2666b54f1b09cfeae25fd62c135293688cc91e854ac3097a898
-
Size
32KB
-
MD5
e2e21e957f11bdeece53d32ef7a87200
-
SHA1
163e343f1145112c70b9dfb769e1edd95aeea727
-
SHA256
b39589d6427aa2666b54f1b09cfeae25fd62c135293688cc91e854ac3097a898
-
SHA512
dd3befe3490377cb89a56b7096f9c0cf77632656940b0c8153d50b28d1e030fcd624a1ecb5b99e9248ef3f086505753778997fdf7b7f15d3855279781a9154da
-
SSDEEP
384:z5Z2iQY1yEccOrM5si+dCLp6dqs9dFPI4+hAVoTi+NlDQodg9TdFpyFEIGsJjwEr:tI05cTvTdCmvsuouDbEEIGfRd+f
Malware Config
Extracted
njrat
Hacked By HiDDen PerSOn
4bdd702755ab14d7cb87b9060eac7a2c
-
reg_key
4bdd702755ab14d7cb87b9060eac7a2c
Signatures
-
Njrat family
Files
-
b39589d6427aa2666b54f1b09cfeae25fd62c135293688cc91e854ac3097a898.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ