Behavioral task
behavioral1
Sample
d37faa03f5456c68e57cda201f4f73a9a140600735a258e144d8e9aaf749af3f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d37faa03f5456c68e57cda201f4f73a9a140600735a258e144d8e9aaf749af3f.exe
Resource
win10v2004-20220901-en
General
-
Target
d37faa03f5456c68e57cda201f4f73a9a140600735a258e144d8e9aaf749af3f
-
Size
29KB
-
MD5
6f9486b08534959c2ae7fc0c16ee35c0
-
SHA1
3272b8b578f129db7d7d1e7762d9fed0ccb98a4c
-
SHA256
d37faa03f5456c68e57cda201f4f73a9a140600735a258e144d8e9aaf749af3f
-
SHA512
be8ff3b2b219bb9ba41a19e94155259913b48148a465232e002bdcd46d9559a3c9e5622aeacce428c1cfea0c0d816060dbe289faf98cd38be8477af0f820483e
-
SSDEEP
768:PKV7JEWe4PVzdmBRbqELeuBKh0p29SgRh0a:a7JbhmBRblrKhG29jh0a
Malware Config
Extracted
njrat
0.6.4
HacKed By Bader ~
ss123.ddns.net:1651
5cd8f17f4086744065eb0992a09e05a2
-
reg_key
5cd8f17f4086744065eb0992a09e05a2
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
d37faa03f5456c68e57cda201f4f73a9a140600735a258e144d8e9aaf749af3f.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ