Behavioral task
behavioral1
Sample
7a138b35ceebce064755c3f664f8f51df0dbf8a93cdff37b94ba6df3f128bd63.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7a138b35ceebce064755c3f664f8f51df0dbf8a93cdff37b94ba6df3f128bd63.exe
Resource
win10v2004-20220812-en
General
-
Target
7a138b35ceebce064755c3f664f8f51df0dbf8a93cdff37b94ba6df3f128bd63
-
Size
23KB
-
MD5
740cb7a3651824d24a44bc6b16872f20
-
SHA1
d2099eb62aef61b95ee0d7f2073a9cc324869967
-
SHA256
7a138b35ceebce064755c3f664f8f51df0dbf8a93cdff37b94ba6df3f128bd63
-
SHA512
87c9f16adb71aa0b9a4661506e85bb63d0f621e3c8e83ae54692558755f647f9fa6aa0dc298e39747e6cc5cd37fc36d99d53de8a2b9488f501572b45b2041fff
-
SSDEEP
384:v8aZYC9twBNdcvFaly2H0dbJo6HghcASEJqc/ZmRvR6JZlbw8hqIusZzZH9x:jY+sNKqNHnSdRpcnu43
Malware Config
Extracted
njrat
0.7d
HacKed
ehab123.no-ip.biz:1177
df9c15696cd4c733783b209b98d1e3f3
-
reg_key
df9c15696cd4c733783b209b98d1e3f3
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
7a138b35ceebce064755c3f664f8f51df0dbf8a93cdff37b94ba6df3f128bd63.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ