Behavioral task
behavioral1
Sample
ee3415abaf4cad138aebf00e35cedbf43d5eeda2f5742c67b32a1d6bdb07eb23.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ee3415abaf4cad138aebf00e35cedbf43d5eeda2f5742c67b32a1d6bdb07eb23.exe
Resource
win10v2004-20220812-en
General
-
Target
ee3415abaf4cad138aebf00e35cedbf43d5eeda2f5742c67b32a1d6bdb07eb23
-
Size
39KB
-
MD5
730da965acf1dbbd8f6f84b54943e230
-
SHA1
6615a64e02298e543d1a76f452580018f2c0462b
-
SHA256
ee3415abaf4cad138aebf00e35cedbf43d5eeda2f5742c67b32a1d6bdb07eb23
-
SHA512
b67f8b59ea7606e46ad382c907262511aa9c245afec6f35d793047e0f27f6c8dbdc5c177eeff7b24926d1d24a2bab2021d29a89ca4b25ef77b7fdf6665723650
-
SSDEEP
768:7sDsu4xyPgbmE84Mdr9/TiEXD4ar4ad1tnZOixLD/zlemBB0Cmo:wDH4oPgyE4hBTiEXD7r4Qnck/zlhBB0H
Malware Config
Extracted
njrat
0.6.4
HacKed by nemixxx
htn4231.zapto.org:1177
3329e1676a11a138f7984f378b1cf49d
-
reg_key
3329e1676a11a138f7984f378b1cf49d
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
ee3415abaf4cad138aebf00e35cedbf43d5eeda2f5742c67b32a1d6bdb07eb23.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ