Behavioral task
behavioral1
Sample
2081d84c4362b1c2e5173a46f8b5b15961aab6750e2fca52c10a6ec5664f9e90.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2081d84c4362b1c2e5173a46f8b5b15961aab6750e2fca52c10a6ec5664f9e90.exe
Resource
win10v2004-20220812-en
General
-
Target
2081d84c4362b1c2e5173a46f8b5b15961aab6750e2fca52c10a6ec5664f9e90
-
Size
22KB
-
MD5
a8060b13526d0320f759fd617f837cb9
-
SHA1
6022db048c08c3d342995c3919efe898d9a39208
-
SHA256
2081d84c4362b1c2e5173a46f8b5b15961aab6750e2fca52c10a6ec5664f9e90
-
SHA512
45d395cd9a27ddd86196bc2aa7938fe9f115af8db67851e2ab59dc24040985ad632051aea51dc87d046b0bb3ea945e0aabacf6de481ea6d0fb3181dc5d5b1e4b
-
SSDEEP
384:xweXCQIreJig/8Z7SS1fEBpng6tgL2IBPZVmRvR6JZlbw8hqIusZzZB2:mLq411eRpcnu/
Malware Config
Extracted
njrat
0.7d
HacKed
fares123kara.no-ip.biz:5552
3cd79ebc018450e2a6a85356f50d30e8
-
reg_key
3cd79ebc018450e2a6a85356f50d30e8
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
2081d84c4362b1c2e5173a46f8b5b15961aab6750e2fca52c10a6ec5664f9e90.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ