Behavioral task
behavioral1
Sample
fd16d94aee5d7b6f5af607b3de3b7f8132a074158df3da373a0119e109a5aec0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fd16d94aee5d7b6f5af607b3de3b7f8132a074158df3da373a0119e109a5aec0.exe
Resource
win10v2004-20220812-en
General
-
Target
fd16d94aee5d7b6f5af607b3de3b7f8132a074158df3da373a0119e109a5aec0
-
Size
23KB
-
MD5
916a94a4125c581a65a2106a8877bca0
-
SHA1
cb1cab969e25a25e74ffc3fae48b4563694d32ca
-
SHA256
fd16d94aee5d7b6f5af607b3de3b7f8132a074158df3da373a0119e109a5aec0
-
SHA512
80de21dfe00ca028b0d82904cf1b6f1271f4dff754eb71474ab4bec908a8584dd900987941169ae04ff6dd3e934a19376cf657832b96ca5c37006ca7f157ce82
-
SSDEEP
384:T8aZYC9twBNdcvFaly2H0dbJo6HghcASEJqc/ZmRvR6JZlbw8hqIusZzZUj:HY+sNKqNHnSdRpcnuN
Malware Config
Extracted
njrat
0.7d
HacKed
futabas.no-ip.biz:5552
3af00936a2d23cbdf7828e19ea107f45
-
reg_key
3af00936a2d23cbdf7828e19ea107f45
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
fd16d94aee5d7b6f5af607b3de3b7f8132a074158df3da373a0119e109a5aec0.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ