Behavioral task
behavioral1
Sample
d7dca7efefa5f3cdee012fb0f1ca12f0c6a7761c4bdb60739efc6b7a6841aab1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d7dca7efefa5f3cdee012fb0f1ca12f0c6a7761c4bdb60739efc6b7a6841aab1.exe
Resource
win10v2004-20220812-en
General
-
Target
d7dca7efefa5f3cdee012fb0f1ca12f0c6a7761c4bdb60739efc6b7a6841aab1
-
Size
28KB
-
MD5
2456f2b73af33797dc1f678ae893f07c
-
SHA1
9d906a3a0b8fd70e20c7e7d827581e5e41fee350
-
SHA256
d7dca7efefa5f3cdee012fb0f1ca12f0c6a7761c4bdb60739efc6b7a6841aab1
-
SHA512
eecab48ec23e4d79d10857e11883a4d9d2ad8d58d9a8023811079a90dacc8f35d79dd401f064abbc93d1c674c7e3b2e7230d4ccfb70f1a0656219835589f6dfe
-
SSDEEP
384:YhkrLGN8fNl7L5H4yAyr9N95jv8CumqDM1TeHdGBsbh0w4wlAokw9OhgOL1vYRGx:H7R4yAyrR8MqYTeEBKh0p29SgRMZ
Malware Config
Extracted
njrat
0.6.4
HacKed
karokh.no-ip.biz:1177
b7c77f48dde2ad69a039c2aceab2d240
-
reg_key
b7c77f48dde2ad69a039c2aceab2d240
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
d7dca7efefa5f3cdee012fb0f1ca12f0c6a7761c4bdb60739efc6b7a6841aab1.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ