Behavioral task
behavioral1
Sample
6406deb5d746e594314c4d777cc61664f8ada174556f34951f472caf62a73ab2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6406deb5d746e594314c4d777cc61664f8ada174556f34951f472caf62a73ab2.exe
Resource
win10v2004-20220812-en
General
-
Target
6406deb5d746e594314c4d777cc61664f8ada174556f34951f472caf62a73ab2
-
Size
29KB
-
MD5
926adde483d8c89fae268ff39ab09a40
-
SHA1
5e371f2dcca3faded1c589c09416134e24cb7d8f
-
SHA256
6406deb5d746e594314c4d777cc61664f8ada174556f34951f472caf62a73ab2
-
SHA512
6e17b38006b3e415b049511d212af74c20b5fead23c96614f2a88cf2a73a0b5b56c8fc2662788b43aa97fcb500d362c42b239307ece458293387c31e7ea19e1b
-
SSDEEP
384:MFpQjtl7jBnoKoK3JX15nHK4GumqDAEReIlGBsbh0w4wlAokw9OhgOL1vYRGOZzF:Mi7hoKoGJFNK4Aq1RehBKh0p29SgRh7
Malware Config
Extracted
njrat
0.6.4
HacKed
123.0.0.1:5555
5cd8f17f4086744065eb0992a09e05a2
-
reg_key
5cd8f17f4086744065eb0992a09e05a2
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
6406deb5d746e594314c4d777cc61664f8ada174556f34951f472caf62a73ab2.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ