Behavioral task
behavioral1
Sample
e885547c5728ddc9d0630d649e68ac6f7303ab481a9d54173487ccff6d8f6664.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e885547c5728ddc9d0630d649e68ac6f7303ab481a9d54173487ccff6d8f6664.exe
Resource
win10v2004-20220812-en
General
-
Target
e885547c5728ddc9d0630d649e68ac6f7303ab481a9d54173487ccff6d8f6664
-
Size
29KB
-
MD5
642f06ecd1e824c43ade05035eb5c660
-
SHA1
1b7c4b3f9d2dd7f28081281569bb432080848ca4
-
SHA256
e885547c5728ddc9d0630d649e68ac6f7303ab481a9d54173487ccff6d8f6664
-
SHA512
527aca1b7996a38ad90af89819592b4cfd8f5481a081e2a6ece428c90f1500523bd1511f37ea8fccf69bcad0b53fb0c501053f6b10f3ce80b76f83a0ed76fa68
-
SSDEEP
384:M2nLNl73t5otQMOdePp5TdNZmGmqD8ZneQqGBsbh0w4wlAokw9OhgOL1vYRGOZz2:b7jo2MzBvb4qcneQBKh0p29SgRTbe
Malware Config
Extracted
njrat
0.6.4
windows 10
safa7tn.ddns.net:27468
08f4dc96bbb7af09d1a37fe35c75a42f
-
reg_key
08f4dc96bbb7af09d1a37fe35c75a42f
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
e885547c5728ddc9d0630d649e68ac6f7303ab481a9d54173487ccff6d8f6664.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ