Behavioral task
behavioral1
Sample
c176fad5823884fa43c8a4441a7edbc4be4089828528238df5a2eb648fdb2d10.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c176fad5823884fa43c8a4441a7edbc4be4089828528238df5a2eb648fdb2d10.exe
Resource
win10v2004-20221111-en
General
-
Target
c176fad5823884fa43c8a4441a7edbc4be4089828528238df5a2eb648fdb2d10
-
Size
29KB
-
MD5
3114067535c43175de053545819ba9fe
-
SHA1
577f878d60f8b6118e80239db3d39d0456beb179
-
SHA256
c176fad5823884fa43c8a4441a7edbc4be4089828528238df5a2eb648fdb2d10
-
SHA512
a626ac084f4241b99e8d8fae00aa922fac679722b9d377cd2c566d631c797a954e8eb1153b95595c9dda81177556f3f35722516a222bdbed7042584377a58f30
-
SSDEEP
384:vQXpl7dzns8oDw/LRP55/4GWmqDSeXegLGBsbh0w4wlAokw9OhgOL1vYRGOZznck:m7Js8oDSJz4wqZXenBKh0p29SgReK
Malware Config
Extracted
njrat
0.6.4
HacKed
sarmad122.no-ip.biz:1177
357a24b24295b8c8475760408668d683
-
reg_key
357a24b24295b8c8475760408668d683
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
c176fad5823884fa43c8a4441a7edbc4be4089828528238df5a2eb648fdb2d10.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ