Behavioral task
behavioral1
Sample
7522a654a8ccf1614088f44d2c074f9eea29f483239f3042ede71b5f584badd9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7522a654a8ccf1614088f44d2c074f9eea29f483239f3042ede71b5f584badd9.exe
Resource
win10v2004-20220812-en
General
-
Target
7522a654a8ccf1614088f44d2c074f9eea29f483239f3042ede71b5f584badd9
-
Size
23KB
-
MD5
4186c6f493c3ece99716363cdcb69ee0
-
SHA1
ac8cf3a4b4774f6d827851ebf513b5fc3904776a
-
SHA256
7522a654a8ccf1614088f44d2c074f9eea29f483239f3042ede71b5f584badd9
-
SHA512
36971d867d9f15336929d9ba540f38df6be0bdda6b96db59411368bd72f7cc82d0f12e6298ea0973c96297da24b9c2fb0332654e06d7b4fac618eeed3f3cfed0
-
SSDEEP
384:WMK6b2GZsx/Yr1+liORH1kcPFQ6Lg9gSOYRr9mRvR6JZlbw8hqIusZzZM2V:Bb9glF51LRpcnuu
Malware Config
Extracted
njrat
0.7d
HacKed
dyarykarzan.no-ip.biz:80
7ae45f9e97ee65d6046344c2b8ea3bd8
-
reg_key
7ae45f9e97ee65d6046344c2b8ea3bd8
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
7522a654a8ccf1614088f44d2c074f9eea29f483239f3042ede71b5f584badd9.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ