Behavioral task
behavioral1
Sample
889fae79a25bbb5e43f2276b571e50a54409eda6ad4a481dfeabd3a727a61a29.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
889fae79a25bbb5e43f2276b571e50a54409eda6ad4a481dfeabd3a727a61a29.exe
Resource
win10v2004-20220812-en
General
-
Target
889fae79a25bbb5e43f2276b571e50a54409eda6ad4a481dfeabd3a727a61a29
-
Size
23KB
-
MD5
2dca2c8fb8d62970d06d7c9f53c758e6
-
SHA1
30a99b983bba0e0a526fe559079ecbb5e24d1bd1
-
SHA256
889fae79a25bbb5e43f2276b571e50a54409eda6ad4a481dfeabd3a727a61a29
-
SHA512
9e80731749c84c4e734292db48b1e434aae39e2f1fbce2aa9ff476894e7d72376243f64604b3312f16bcbb8e4c252e04620fffe661eec678ad3cd0970d193495
-
SSDEEP
384:psqS+ER6vRKXGYKRWVSujUtX9w6Dglo61Z5DVmRvR6JZlbw8hqIusZzZguBf:if65K2Yf1jKRpcnu3G
Malware Config
Extracted
njrat
0.7d
HacKed
a777a.no-ip.biz:5556
e369b878de190378171035199570841d
-
reg_key
e369b878de190378171035199570841d
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
889fae79a25bbb5e43f2276b571e50a54409eda6ad4a481dfeabd3a727a61a29.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ