Behavioral task
behavioral1
Sample
615cc5fbbdf1d7d491697d05153a82286c4975f72e9cacd4d874ccfce5608c12.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
615cc5fbbdf1d7d491697d05153a82286c4975f72e9cacd4d874ccfce5608c12.exe
Resource
win10v2004-20220812-en
General
-
Target
615cc5fbbdf1d7d491697d05153a82286c4975f72e9cacd4d874ccfce5608c12
-
Size
22KB
-
MD5
93f1e8ce5d50c7383d3e1085da631c70
-
SHA1
b6f3dd33b4a8a770dfeb0cf926eb37288b9c5e5c
-
SHA256
615cc5fbbdf1d7d491697d05153a82286c4975f72e9cacd4d874ccfce5608c12
-
SHA512
1a0176e0444a95b02bbfe24bc0f5ed6f768c692bc1120dc3e52893d68e8391dd4c8c2545cb38ca46432fc8d6a5b1f01e87615e6a026d2a53f254d432f729c5a0
-
SSDEEP
384:nweXCQIreJig/8Z7SS1fEBpng6tgL2IBPZVmRvR6JZlbw8hqIusZzZju:YLq411eRpcnuJ
Malware Config
Extracted
njrat
0.7d
wael ._.
192lol.no-ip.org:1177
24150e6ee4b06ef9362d1b521ba4e2d4
-
reg_key
24150e6ee4b06ef9362d1b521ba4e2d4
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
615cc5fbbdf1d7d491697d05153a82286c4975f72e9cacd4d874ccfce5608c12.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ