Behavioral task
behavioral1
Sample
605269218a0a6aefb7ec025e65680ba5eeea36cf37fbdee8495d7cd551ab1ae6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
605269218a0a6aefb7ec025e65680ba5eeea36cf37fbdee8495d7cd551ab1ae6.exe
Resource
win10v2004-20220901-en
General
-
Target
605269218a0a6aefb7ec025e65680ba5eeea36cf37fbdee8495d7cd551ab1ae6
-
Size
50KB
-
MD5
6ec43226d1738ebd4d4b3cd3fe364be0
-
SHA1
b692692434c36d6bb77fae19234ecf33d47ede9e
-
SHA256
605269218a0a6aefb7ec025e65680ba5eeea36cf37fbdee8495d7cd551ab1ae6
-
SHA512
bc3e74cd203f7900f4ef6a9e4d53d018fc8f0828626f43ceeec9c5187042a4ae10882294c6ee29086d4403606f56ac9df6c3fca6ab535fdf8ffa628b76583805
-
SSDEEP
768:Re9EJLN/yRpcnuE+miJf61wEsgNuHCCulZFC1lRdSYlNFqC8AsmHmm:w9EJLdyRWuE+q1NCzc7C1ldFl
Malware Config
Extracted
njrat
0.7d
HacKed
tjrltjr9644.conds.com:5552
73a57aadbd95dac3c4f8c9439ff35905
-
reg_key
73a57aadbd95dac3c4f8c9439ff35905
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
605269218a0a6aefb7ec025e65680ba5eeea36cf37fbdee8495d7cd551ab1ae6.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 27KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE