Behavioral task
behavioral1
Sample
6570defb8387aacdede1a40e7b796e3d731a01e97d3cfbfb89c1fbb5de015729.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6570defb8387aacdede1a40e7b796e3d731a01e97d3cfbfb89c1fbb5de015729.exe
Resource
win10v2004-20220812-en
General
-
Target
6570defb8387aacdede1a40e7b796e3d731a01e97d3cfbfb89c1fbb5de015729
-
Size
24KB
-
MD5
80525eb2f26e37cb6426e5d6626f0a90
-
SHA1
36fa5db5a7017ee7891f07b7e5c662d91b43259c
-
SHA256
6570defb8387aacdede1a40e7b796e3d731a01e97d3cfbfb89c1fbb5de015729
-
SHA512
6485087cd7a7aa24d41075c389bf525c9b63de0d1d413ab45f84a20df1388436e8d4259e81d527e213c952e53ba55d579f587ecab36731e009d2ee0676686a6f
-
SSDEEP
384:nVEf2S6kLuuAnWe8W9cWOkQ6yg0FrO065LKmRvR6JZlbw8hqIusZzZ3C6:eSWUf9jRpcnuE
Malware Config
Extracted
njrat
0.7d
الطــــــــــــــــــيب
manmanno.no-ip.org:5552
ac08d0a44a1d56da21ae6d814aa48a2f
-
reg_key
ac08d0a44a1d56da21ae6d814aa48a2f
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
6570defb8387aacdede1a40e7b796e3d731a01e97d3cfbfb89c1fbb5de015729.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ