Behavioral task
behavioral1
Sample
2f56f5b859986020d3d9bc00bf44607637b9cca13b19168ae65d83fea682aabd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2f56f5b859986020d3d9bc00bf44607637b9cca13b19168ae65d83fea682aabd.exe
Resource
win10v2004-20220812-en
General
-
Target
2f56f5b859986020d3d9bc00bf44607637b9cca13b19168ae65d83fea682aabd
-
Size
23KB
-
MD5
915a4cc54c55bec3e121ea02ac6c5f10
-
SHA1
75e7c80a8847c34d0110b1468b5eb44975e844bc
-
SHA256
2f56f5b859986020d3d9bc00bf44607637b9cca13b19168ae65d83fea682aabd
-
SHA512
7a4fdc54f573e93452a7faf07bee606569afe168c02ea7f7a5f2a7c6e49d32342157e63527b9644602f8a5bf67cd4112054848811d2516710bf902385abaac48
-
SSDEEP
384:UnY324bcgPiJLQrfARGSRUJsbY6ZgvSMBD3t8mRvR6JZlbw8hqIusZzZoQ:UwL2s+tRyRpcnuO
Malware Config
Extracted
njrat
0.7d
HacKed
shaban123.no-ip.biz:1177
638fa88f02390e410ab48966c8b2387f
-
reg_key
638fa88f02390e410ab48966c8b2387f
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
2f56f5b859986020d3d9bc00bf44607637b9cca13b19168ae65d83fea682aabd.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ