Behavioral task
behavioral1
Sample
fe781b6cfe1fe882950c64424e6e1902dfc5b80409b35b0f41f8d9945768bde9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fe781b6cfe1fe882950c64424e6e1902dfc5b80409b35b0f41f8d9945768bde9.exe
Resource
win10v2004-20220812-en
General
-
Target
fe781b6cfe1fe882950c64424e6e1902dfc5b80409b35b0f41f8d9945768bde9
-
Size
23KB
-
MD5
649cafc90ae690628f9fb8872ef35100
-
SHA1
891b3870948a566f4734a0cc0037498a61ae0802
-
SHA256
fe781b6cfe1fe882950c64424e6e1902dfc5b80409b35b0f41f8d9945768bde9
-
SHA512
77840a1f41d0584811e6700b496afb838368cb5a8adb8dc364c04374d1d67ed7f1f9992250f94e64f05193e21823e3448414c1b58ab2cc99dbe487494d920ea7
-
SSDEEP
384:x4Q+SAN7uprgvM5OSUswZXg69gbm4hfpFmRvR6JZlbw8hqIusZzZDTE:9OaxVULRpcnukI
Malware Config
Extracted
njrat
0.7d
HacKed
arabfucktania.no-ip.info:1177
a24d2c631f4d4534ac110043701abe33
-
reg_key
a24d2c631f4d4534ac110043701abe33
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
fe781b6cfe1fe882950c64424e6e1902dfc5b80409b35b0f41f8d9945768bde9.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ