Behavioral task
behavioral1
Sample
ba248fb5b5cdc681b3b1a0e3f894b2d2feeed82c39382da24cf3c29f921ef1f8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ba248fb5b5cdc681b3b1a0e3f894b2d2feeed82c39382da24cf3c29f921ef1f8.exe
Resource
win10v2004-20220901-en
General
-
Target
ba248fb5b5cdc681b3b1a0e3f894b2d2feeed82c39382da24cf3c29f921ef1f8
-
Size
23KB
-
MD5
046b80bcf2186f7f4b620cb66187d335
-
SHA1
c3a60d9280624aa630ab9a26e08371fa2b35e77e
-
SHA256
ba248fb5b5cdc681b3b1a0e3f894b2d2feeed82c39382da24cf3c29f921ef1f8
-
SHA512
32e71e4a6dd5bea68bdfb04bdd1c8e2ab767ccb708a0f427b94ec616d7d3801b03074d989753af60e1b1e0b7e10ee34e394ea12563d15d64f1328af6fec9155a
-
SSDEEP
384:b8aZYC9twBNdcvFaly2H0dbJo6HghcASEJqc/ZmRvR6JZlbw8hqIusZzZqpg:fY+sNKqNHnSdRpcnuBg
Malware Config
Extracted
njrat
0.7d
HacKed
mooaminf.ddns.net:5552
7d3652ca4f184b3c50faf22adc4d7473
-
reg_key
7d3652ca4f184b3c50faf22adc4d7473
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
ba248fb5b5cdc681b3b1a0e3f894b2d2feeed82c39382da24cf3c29f921ef1f8.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ