Behavioral task
behavioral1
Sample
a54bfffab3e5508341208f16ff2488a51b5d907625adb9f45c1e2a69ac66a7a0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a54bfffab3e5508341208f16ff2488a51b5d907625adb9f45c1e2a69ac66a7a0.exe
Resource
win10v2004-20220812-en
General
-
Target
a54bfffab3e5508341208f16ff2488a51b5d907625adb9f45c1e2a69ac66a7a0
-
Size
28KB
-
MD5
902d8051d70c400c155c55db1e65efd0
-
SHA1
01b01cde0e5f2929745884327757650a46c2803d
-
SHA256
a54bfffab3e5508341208f16ff2488a51b5d907625adb9f45c1e2a69ac66a7a0
-
SHA512
1ceab22333742fe853f215bbd32257288c2fdf7e5eb05a5df624716ac6df31ea1deb9081d14b2b2da369fe809c26ed0b8e55f11e3c04f00e980357609c7a40e1
-
SSDEEP
384:rhkrLGN8fNl7L5H4yAyr9N95jv8CumqDM1TeHdGBsbh0w4wlAokw9OhgOL1vYRGC:q7R4yAyrR8MqYTeEBKh0p29SgRis
Malware Config
Extracted
njrat
0.6.4
HACKED
enderzzz.no-ip.biz:1177
ecc7c8c51c0850c1ec247c7fd3602f20
-
reg_key
ecc7c8c51c0850c1ec247c7fd3602f20
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
a54bfffab3e5508341208f16ff2488a51b5d907625adb9f45c1e2a69ac66a7a0.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ