Behavioral task
behavioral1
Sample
879ce3216459bc8d61a721a9e1a3b125dd1eaa324749fc98bfc52c3d4fd08a71.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
879ce3216459bc8d61a721a9e1a3b125dd1eaa324749fc98bfc52c3d4fd08a71.exe
Resource
win10v2004-20220901-en
General
-
Target
879ce3216459bc8d61a721a9e1a3b125dd1eaa324749fc98bfc52c3d4fd08a71
-
Size
125KB
-
MD5
322a5d7a1366074ffdde76c4bc10f370
-
SHA1
fa36065d3887f721b78973a5a2bef01795c9cc43
-
SHA256
879ce3216459bc8d61a721a9e1a3b125dd1eaa324749fc98bfc52c3d4fd08a71
-
SHA512
7bd76b5b7d07c8dd9cb2ff4f48e399e0ee28c4a619d58a9b07bcf4e43f3ba84bc74fcdda9fe737335a409ebf44607b7d1cf7c18ce976b37f902c2c6d35bd1c69
-
SSDEEP
1536:ZatcgmMmMSOOzjQyG9GD2XzbmX0ZXK8YvZ/ZFapExI15F1le/jHf80OA8F:Z8fO/wCEPYvZ/zaHDnA/jHU2
Malware Config
Extracted
njrat
0.7d
HacKed
mistertromperie.no-ip.biz:1177
e8b33be1a843213e8fb6c05f303aa5e7
-
reg_key
e8b33be1a843213e8fb6c05f303aa5e7
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
879ce3216459bc8d61a721a9e1a3b125dd1eaa324749fc98bfc52c3d4fd08a71.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 123KB - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 571B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ