Behavioral task
behavioral1
Sample
95d361865631bb88ac0e6328ca32087570aa4c5147155786c78921798a5e7e4e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
95d361865631bb88ac0e6328ca32087570aa4c5147155786c78921798a5e7e4e.exe
Resource
win10v2004-20220812-en
General
-
Target
95d361865631bb88ac0e6328ca32087570aa4c5147155786c78921798a5e7e4e
-
Size
23KB
-
MD5
823c34c51cc0b02adc648edb7ed595d0
-
SHA1
712c7fe39a940cfa41dc6d143b42a1a8fbbe533e
-
SHA256
95d361865631bb88ac0e6328ca32087570aa4c5147155786c78921798a5e7e4e
-
SHA512
d62f03255ad5610f52d9d83a8c4584c9b8e528d5898d4f3f821cac76e8baff06df4c51eff811742a1abfd910ddd09b11f757008ddcba0cc91fe71a14c77afba1
-
SSDEEP
384:7/qUP2x0R4IxVISuI+M/Pdw6jgFI6VeOj1mRvR6JZlbw8hqIusZzZmjlfx:h4oA1Ic4RpcnutjX
Malware Config
Extracted
njrat
0.7d
أبہنہ ألأعہظہمہيہة
mustafahack12.no-ip.biz:5552
2400e8ca635b4e8570ad0ef8cbb09453
-
reg_key
2400e8ca635b4e8570ad0ef8cbb09453
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
95d361865631bb88ac0e6328ca32087570aa4c5147155786c78921798a5e7e4e.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ