Behavioral task
behavioral1
Sample
4be243bfd04e5d25c69ed5f8b0d663e179222a8ae68aabe2e46af65cdf622118.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4be243bfd04e5d25c69ed5f8b0d663e179222a8ae68aabe2e46af65cdf622118.exe
Resource
win10v2004-20221111-en
General
-
Target
4be243bfd04e5d25c69ed5f8b0d663e179222a8ae68aabe2e46af65cdf622118
-
Size
40KB
-
MD5
f09e3b98a74ff9bb3ea99d26e1e43add
-
SHA1
7c9f8cbd8299d40d3f972c0fa6400b4058f8c412
-
SHA256
4be243bfd04e5d25c69ed5f8b0d663e179222a8ae68aabe2e46af65cdf622118
-
SHA512
e9780eb4be28a72a5001347715ee42ed48d80a10d401a927089e9bf9a841f9561d326f11e72b4aab1ef97f0fa63a0f1921ebdb70490f352b03fa2574de48b751
-
SSDEEP
768:cN0aatpAnARpcnuuM2P1Dgd4OMocBLjSdvgxF:cN0X/AARWuuMc1Dy4DocVjS5gxF
Malware Config
Extracted
njrat
0.7d
Skype For Hack
sakarsakar.no-ip.biz:5552
2f46e1c9317b4792f60fca96d07d4d7d
-
reg_key
2f46e1c9317b4792f60fca96d07d4d7d
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
4be243bfd04e5d25c69ed5f8b0d663e179222a8ae68aabe2e46af65cdf622118.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ