Behavioral task
behavioral1
Sample
a9de3ecfc097a8bc2ce118ac232e2e2aef29d5a207f44660556f5ba888632aa6.exe
Resource
win7-20220812-en
General
-
Target
a9de3ecfc097a8bc2ce118ac232e2e2aef29d5a207f44660556f5ba888632aa6
-
Size
29KB
-
MD5
500e3b0854861f347f0110ad63e09fa0
-
SHA1
9aa750fbc91ee42f21aeadf5c18d477a023a7d67
-
SHA256
a9de3ecfc097a8bc2ce118ac232e2e2aef29d5a207f44660556f5ba888632aa6
-
SHA512
5fe56f456a5bb8ce2850fe48597cf6a7c9db6fd9fda3eed929633c7f3d469c1c8e61fb6b256a34964909a153a5c1fba8b9b4eb4693768af81131165fbade778e
-
SSDEEP
384:paFCtl7Dh+oqIqEXV5HEQTGumqDgN3eH6GBsbh0w4wlAokw9OhgOL1vYRGOZzSZ6:374oqIjlLTAqM3eFBKh0p29SgRU6
Malware Config
Extracted
njrat
0.6.4
جيج كر
bbb3.zapto.org:1177
a474c6d2b75d64b3ed1078b377b83c48
-
reg_key
a474c6d2b75d64b3ed1078b377b83c48
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
a9de3ecfc097a8bc2ce118ac232e2e2aef29d5a207f44660556f5ba888632aa6.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ