Behavioral task
behavioral1
Sample
9b94717826d0c30f39ca859fcf6fa420b0881ce250de94c327c23e1ba391001d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9b94717826d0c30f39ca859fcf6fa420b0881ce250de94c327c23e1ba391001d.exe
Resource
win10v2004-20220812-en
General
-
Target
9b94717826d0c30f39ca859fcf6fa420b0881ce250de94c327c23e1ba391001d
-
Size
89KB
-
MD5
a2df30075be17025597b4a8757e49d00
-
SHA1
04ac6d2fe8dec27b30bc3d1056ae46137bd7de97
-
SHA256
9b94717826d0c30f39ca859fcf6fa420b0881ce250de94c327c23e1ba391001d
-
SHA512
96d4c86985b5864a7cda098b7bfffe6fbac2838d05f3db14d91e16eedac0bf88e7c24fd4a2acbb27a16ed5a27a967ca4b06ff13ce7ef9cd9da324e4a355608ce
-
SSDEEP
1536:nW4VcDRWuiasBbAHdaBdkzzsEHHHHHHHHHHHHHHHHHHXOY:W4V60HBbAHgbkzzsU
Malware Config
Extracted
njrat
0.7d
HacKed
opaeda123.no-ip.biz:1177
4fc092d83dd57c6c3b37cdd6e9b178fc
-
reg_key
4fc092d83dd57c6c3b37cdd6e9b178fc
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
9b94717826d0c30f39ca859fcf6fa420b0881ce250de94c327c23e1ba391001d.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ