Behavioral task
behavioral1
Sample
029fe4625db1f972f1f9b55deed08acd14f5377a2bc45a4733770a8ceffd7730.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
029fe4625db1f972f1f9b55deed08acd14f5377a2bc45a4733770a8ceffd7730.exe
Resource
win10v2004-20220812-en
General
-
Target
029fe4625db1f972f1f9b55deed08acd14f5377a2bc45a4733770a8ceffd7730
-
Size
29KB
-
MD5
646b995f05c88ad1162aa2045cf89b70
-
SHA1
9266726b62e1b78bb24c4a32fd932223e381f34c
-
SHA256
029fe4625db1f972f1f9b55deed08acd14f5377a2bc45a4733770a8ceffd7730
-
SHA512
960d8f078e2ff5b7b23ebe964b7ecc7c8b6e6875a4d7ec5b8f80565365726133ee7bf4905c7974e450790fe0475e4d11cf374c7c66598e99c9b0bdbff71e6c0d
-
SSDEEP
768:iQv/27NYsDkfZPoIqlHepBKh0p29SgR+K:3m7N143wEKhG29j+K
Malware Config
Extracted
njrat
0.6.4
HacKed
xekko.no-ip.org:1177
5cd8f17f4086744065eb0992a09e05a2
-
reg_key
5cd8f17f4086744065eb0992a09e05a2
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
029fe4625db1f972f1f9b55deed08acd14f5377a2bc45a4733770a8ceffd7730.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ