Behavioral task
behavioral1
Sample
d6230d666f97669f4d0bf7d4d16755818701f903295ea9f10eb8194eba0ef4f6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d6230d666f97669f4d0bf7d4d16755818701f903295ea9f10eb8194eba0ef4f6.exe
Resource
win10v2004-20220812-en
General
-
Target
d6230d666f97669f4d0bf7d4d16755818701f903295ea9f10eb8194eba0ef4f6
-
Size
23KB
-
MD5
71282af77bd93e73d2f916d3d1fe2620
-
SHA1
27d33a9a85c1c62ea25e74bf0d33881710522903
-
SHA256
d6230d666f97669f4d0bf7d4d16755818701f903295ea9f10eb8194eba0ef4f6
-
SHA512
b23dda9e08d8135726ca42cc7968d2291967dc84f78b11dbb22424ded294a78b0a098d686c68f83743e884b3c4d4f46ca3014b712bbea6807472ed6ba7431a13
-
SSDEEP
384:cPoWtkEwn65rgjAsGipk55D16xgXakhbZD0mRvR6JZlbw8hqIusZzZZs:co7O89p2rRpcnuh
Malware Config
Extracted
njrat
0.7d
JoKeR_BeH
127.0.0.1:1177
0003c2a673b37e106b6808956a643990
-
reg_key
0003c2a673b37e106b6808956a643990
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
d6230d666f97669f4d0bf7d4d16755818701f903295ea9f10eb8194eba0ef4f6.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ