Behavioral task
behavioral1
Sample
48a0212afe7c122e196d4b08b3744ee0d4cae5239d6e0bf4f7620827e6526fbc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
48a0212afe7c122e196d4b08b3744ee0d4cae5239d6e0bf4f7620827e6526fbc.exe
Resource
win10v2004-20220901-en
General
-
Target
48a0212afe7c122e196d4b08b3744ee0d4cae5239d6e0bf4f7620827e6526fbc
-
Size
27KB
-
MD5
1a896d8ac3670c9f1b85ca2ad5ac2fc4
-
SHA1
9bc6655963f33a1b7c8102ca2c8dc724ce137d77
-
SHA256
48a0212afe7c122e196d4b08b3744ee0d4cae5239d6e0bf4f7620827e6526fbc
-
SHA512
6d5364c2ca5ce533a7130be0a7d0c527de47f2d48122262f5bf5db3d5c4fd473effda6b442eb0accd40785c8cf9b1f1c5db3ce9884ed18d8864d2590b64a01ca
-
SSDEEP
384:vQ+SAN7uprgvM5OSUswZXg69gbm4hfpFmRvR6JZlbw8hqIusZzZrkPF:QOaxVULRpcnu9
Malware Config
Extracted
njrat
0.7d
HacKed
mohamed1medo1.no-ip.info:5552
1f79ba078b416bd05956af1cfc5c6813
-
reg_key
1f79ba078b416bd05956af1cfc5c6813
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
48a0212afe7c122e196d4b08b3744ee0d4cae5239d6e0bf4f7620827e6526fbc.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ