Behavioral task
behavioral1
Sample
1d99a973a0b380416f88829f5a2f148e5a65b48d16769f67e0a0829bdc6d83fc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1d99a973a0b380416f88829f5a2f148e5a65b48d16769f67e0a0829bdc6d83fc.exe
Resource
win10v2004-20220812-en
General
-
Target
1d99a973a0b380416f88829f5a2f148e5a65b48d16769f67e0a0829bdc6d83fc
-
Size
23KB
-
MD5
07ee853a1c29f2b0296e5fa275105560
-
SHA1
8c0bb17f744f82a194e83e276e99d130cee28406
-
SHA256
1d99a973a0b380416f88829f5a2f148e5a65b48d16769f67e0a0829bdc6d83fc
-
SHA512
301de32b2418cb9ef3501fb135d4f3a808c1f38de08a848a2769dac4a2785e0ffa8c09a85244b7e71edfe83c8507e4f39e784dcd8309bf1845128eca5f2a7c2e
-
SSDEEP
384:A8aSyS9gB3Y1KIay2X8cEZI6YgxsGJVPpmRvR6JZlbw8hqIusZzZ3j:v589tXHRpcnuU
Malware Config
Extracted
njrat
0.7d
HacKed
zakariabouziane.no-ip.biz:5552
f0d24d3cf45ef38e827eb1227e406d4b
-
reg_key
f0d24d3cf45ef38e827eb1227e406d4b
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
1d99a973a0b380416f88829f5a2f148e5a65b48d16769f67e0a0829bdc6d83fc.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ