Behavioral task
behavioral1
Sample
d1023d3881e307fe30e2a32b87589e5ab8075f400c4509f5d54e1da5819ce045.exe
Resource
win7-20220812-en
General
-
Target
d1023d3881e307fe30e2a32b87589e5ab8075f400c4509f5d54e1da5819ce045
-
Size
29KB
-
MD5
8fec446b7e51f439043714b0c2201b72
-
SHA1
71910d9f377e2fa3afca81c8acf435146c817de6
-
SHA256
d1023d3881e307fe30e2a32b87589e5ab8075f400c4509f5d54e1da5819ce045
-
SHA512
28173134944c78e2543f231ce5efc15a0e8c8747c0069314961f4014f5d515314f59ee68e5c7cb5dc91e5f597593fe9c585f7813285ef05b36fb971f1ac73282
-
SSDEEP
768:vK7ZW4Oakw1BnX7oqsKuelBKh0p29SgRai:vK78oEJKLKhG29jai
Malware Config
Extracted
njrat
0.6.4
HacKed
kurdistan1.no-ip.org:1155
8515eb34d8f9de5af815466e9715b3e5
-
reg_key
8515eb34d8f9de5af815466e9715b3e5
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
d1023d3881e307fe30e2a32b87589e5ab8075f400c4509f5d54e1da5819ce045.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ