Behavioral task
behavioral1
Sample
bfdfb252fc446d7486156d09b55cbcdae9418a98326c653ca74ecdcc6e7a10a6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bfdfb252fc446d7486156d09b55cbcdae9418a98326c653ca74ecdcc6e7a10a6.exe
Resource
win10v2004-20220812-en
General
-
Target
bfdfb252fc446d7486156d09b55cbcdae9418a98326c653ca74ecdcc6e7a10a6
-
Size
132KB
-
MD5
77f4b28c93a45c96a23b972b1fb00d80
-
SHA1
122c33e1285c31a43d75d31c8c14e37ecc8cf1bb
-
SHA256
bfdfb252fc446d7486156d09b55cbcdae9418a98326c653ca74ecdcc6e7a10a6
-
SHA512
9a1600ed712e1ac5866989098139aa460c77ccfde5058a37807d6a578371a68a183b51e92f1e8810236029c341cea58b8e1fac2a2572aff9e08d4119a0bbc88c
-
SSDEEP
3072:JiC1kFK2tL9iE8Uo6TWqefZ5EyEbfmeT2:JjkbJLOUbfxT2
Malware Config
Extracted
njrat
0.6.4
جـديــــد
ewwe000.no-ip.biz:1177
301b5fcf8ce2fab8868e80b6c1f912fe
-
reg_key
301b5fcf8ce2fab8868e80b6c1f912fe
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
bfdfb252fc446d7486156d09b55cbcdae9418a98326c653ca74ecdcc6e7a10a6.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 130KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 571B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ