Behavioral task
behavioral1
Sample
08a0941387617972b5e572d51ed363e47b9cb16f1cd1010159de04921e00e4a6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
08a0941387617972b5e572d51ed363e47b9cb16f1cd1010159de04921e00e4a6.exe
Resource
win10v2004-20220901-en
General
-
Target
08a0941387617972b5e572d51ed363e47b9cb16f1cd1010159de04921e00e4a6
-
Size
137KB
-
MD5
75f804f44d33003d3524c0cbe3711360
-
SHA1
23ad06e80ebf0d266ca9ea11847932d63d991bf6
-
SHA256
08a0941387617972b5e572d51ed363e47b9cb16f1cd1010159de04921e00e4a6
-
SHA512
2a41d14b9d4320d5d51932cf2e929b5b69129e7ae9601a257ef60a4177668bdfc19f0970d0904c3460bd8d682a8c38e2f9effd60a8ccb8fafa244ea22fa56865
-
SSDEEP
3072:4Wkmr07ZwCZp1ECQo2pkU5taUv/zK/8vQJthM:8wY1f2pkus6/W8cthM
Malware Config
Extracted
njrat
0.7d
طفل هكر
qweasdzxc123.ddns.net:5552
8a4025bf3fc022c0ad991b99a6fe7aa7
-
reg_key
8a4025bf3fc022c0ad991b99a6fe7aa7
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
08a0941387617972b5e572d51ed363e47b9cb16f1cd1010159de04921e00e4a6.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 115KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ