Behavioral task
behavioral1
Sample
dc953691bea74a799828e3bdf2f3a3fe7afa6886b97fc75677ef9f15346c753e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dc953691bea74a799828e3bdf2f3a3fe7afa6886b97fc75677ef9f15346c753e.exe
Resource
win10v2004-20220901-en
General
-
Target
dc953691bea74a799828e3bdf2f3a3fe7afa6886b97fc75677ef9f15346c753e
-
Size
22KB
-
MD5
df854f256abb897e4a43f2d1877a27b5
-
SHA1
2a97a3505d2c3fc03d6e07e215a9a5c02821ee51
-
SHA256
dc953691bea74a799828e3bdf2f3a3fe7afa6886b97fc75677ef9f15346c753e
-
SHA512
ea60ee0fe48b1918e30d28448ff4fc37ef4aaeb9c4138f1b9d017cc3971f564942f6b848e46a4d1ce813f441d1cb489a33ad11e25d13c2955592184df31a3fb9
-
SSDEEP
384:8YmCsw/yJrQ7tRGSQCY1r46JgfCcBjdhmRvR6JZlbw8hqIusZzZYPb:r7GktQBRpcnuX
Malware Config
Extracted
njrat
0.7d
HacKed BY BALA SNIPER
balagyan.no-ip.biz:4554
350b4a49f979c9477d74be0db03f0449
-
reg_key
350b4a49f979c9477d74be0db03f0449
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
dc953691bea74a799828e3bdf2f3a3fe7afa6886b97fc75677ef9f15346c753e.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ