Behavioral task
behavioral1
Sample
015c6a09daf5bc0d551ab53504bf4c9e4c477aa1166b6fafec7bd9c9c94e9dc6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
015c6a09daf5bc0d551ab53504bf4c9e4c477aa1166b6fafec7bd9c9c94e9dc6.exe
Resource
win10v2004-20220812-en
General
-
Target
015c6a09daf5bc0d551ab53504bf4c9e4c477aa1166b6fafec7bd9c9c94e9dc6
-
Size
29KB
-
MD5
60613af171b058140d94df9d01dc82a0
-
SHA1
917e7d8044835e11b7aedd2c50f935ca13a96bf9
-
SHA256
015c6a09daf5bc0d551ab53504bf4c9e4c477aa1166b6fafec7bd9c9c94e9dc6
-
SHA512
a8fbbc1628ba644f9ef5fae9e3d6f06e24d653286ebb8d68c30af25cd20c47c95e147aa739cc5b75aa85f2ba76714cabe1240a87100dd21c0f9495db3aaa84ea
-
SSDEEP
768:p7PIkJ79VJSq0+eMBKh0p29SgR/67b7b7b7b7b7bjo:p7PBcZ6KhG29jGHHHHH3o
Malware Config
Extracted
njrat
0.6.4
جوكر واسط هناااااااااااااااااااا
moha.no-ip.biz:9933
ba4c12bee3027d94da5c81db2d196bfd
-
reg_key
ba4c12bee3027d94da5c81db2d196bfd
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
015c6a09daf5bc0d551ab53504bf4c9e4c477aa1166b6fafec7bd9c9c94e9dc6.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ