Behavioral task
behavioral1
Sample
7a6e47ba86c26f2a90690a6cf5f5b9ff26f05133e508b5c0965aa2376113732c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7a6e47ba86c26f2a90690a6cf5f5b9ff26f05133e508b5c0965aa2376113732c.exe
Resource
win10v2004-20220812-en
General
-
Target
7a6e47ba86c26f2a90690a6cf5f5b9ff26f05133e508b5c0965aa2376113732c
-
Size
23KB
-
MD5
65a4f6bad50e6e1961c2bb48a1d80710
-
SHA1
3099ec5f609a71ca0299a90d40da9cac7436d922
-
SHA256
7a6e47ba86c26f2a90690a6cf5f5b9ff26f05133e508b5c0965aa2376113732c
-
SHA512
ce7b7240b100b9c5b281a8bb6851b52e78877351b148f3138e095858b3d641f71c3b60deb7fa384d96131fc95a523d329d001d79abdd69380f3f51910c84927e
-
SSDEEP
384:DQeCo2zmZbQHkJeCdUwrvQ61gjuQBnB9mRvR6JZlbw8hqIusZzZMt:U5yBVd5Rpcnuv
Malware Config
Extracted
njrat
0.7d
HacKed
aboodydody.no-ip.biz:1177
2a05e2d1c9f43ec415f6709789b4a9b2
-
reg_key
2a05e2d1c9f43ec415f6709789b4a9b2
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
7a6e47ba86c26f2a90690a6cf5f5b9ff26f05133e508b5c0965aa2376113732c.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ