Behavioral task
behavioral1
Sample
7fa83101812b1a4713e40893eedb879665834680f59a3de370ce56bff4113584.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7fa83101812b1a4713e40893eedb879665834680f59a3de370ce56bff4113584.exe
Resource
win10v2004-20220812-en
General
-
Target
7fa83101812b1a4713e40893eedb879665834680f59a3de370ce56bff4113584
-
Size
23KB
-
MD5
5b730c537b81be492a2f7447f01c8c20
-
SHA1
a5fe365563cd069f746ebc92221667bb2f88aff0
-
SHA256
7fa83101812b1a4713e40893eedb879665834680f59a3de370ce56bff4113584
-
SHA512
1c389ac260b28ed35814f8b8b42494e17155cb63e71e794d390aff6275fa66d047f449782bda7e76b5882a383861506fcfd682764c1ddcef23d98367865742f8
-
SSDEEP
384:pDweXCQIreJig/8Z7SS1fEBpng6tgL2IBPZVmRvR6JZlbw8hqIusZzZJ3k:pULq411eRpcnu6U
Malware Config
Extracted
njrat
0.7d
HacKed
oziiiiii.no-ip.info:1177
6bdc86ec6db73223e97ba1725d077088
-
reg_key
6bdc86ec6db73223e97ba1725d077088
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
7fa83101812b1a4713e40893eedb879665834680f59a3de370ce56bff4113584.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ