Behavioral task
behavioral1
Sample
1f160ef011ffacbc1434da0ecfef51f469ba2f510aa499b34975aaac1df4215b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1f160ef011ffacbc1434da0ecfef51f469ba2f510aa499b34975aaac1df4215b.exe
Resource
win10v2004-20220812-en
General
-
Target
1f160ef011ffacbc1434da0ecfef51f469ba2f510aa499b34975aaac1df4215b
-
Size
22KB
-
MD5
90a9345206c9d7cc63fa907746e70d10
-
SHA1
3a6b4fa76f54b4a755a6e18017c86f2b43c97113
-
SHA256
1f160ef011ffacbc1434da0ecfef51f469ba2f510aa499b34975aaac1df4215b
-
SHA512
67d1cdf7a4a1050527f691ecf81e70aa32dd76566f3808f988bfe83ce0fa18fcef696b9eb80867a06bb5d1e3aa116c0f068f46173342e9812301c76cd97e727d
-
SSDEEP
384:aoWSkWHa55BgDVRGipkItzY6vZg36Eh7FpmRvR6JZlbw8hqIusZzZcS:9Juk9pHRpcnu8
Malware Config
Extracted
njrat
0.7d
yehya_ch
yesyehya.no-ip.biz:1169
d4a2fdbfb81b547e49b772d166c6647e
-
reg_key
d4a2fdbfb81b547e49b772d166c6647e
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
1f160ef011ffacbc1434da0ecfef51f469ba2f510aa499b34975aaac1df4215b.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ