Behavioral task
behavioral1
Sample
44b332c60837e8806d42ff8cc655d89b240903a3cea911149347573643658d3f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
44b332c60837e8806d42ff8cc655d89b240903a3cea911149347573643658d3f.exe
Resource
win10v2004-20220812-en
General
-
Target
44b332c60837e8806d42ff8cc655d89b240903a3cea911149347573643658d3f
-
Size
89KB
-
MD5
9f3cfb586f938cfaf8b409a479735682
-
SHA1
4c7d166d99c459885c982d9e22d3c3eea63bf9cc
-
SHA256
44b332c60837e8806d42ff8cc655d89b240903a3cea911149347573643658d3f
-
SHA512
62b4feab7b1760f0bb9d8edb62a570338c83a1f3ba15d8d5bbf1d3e670dc5a3297c54aa11198cdbab5c505db7c14f1cd5b5ee462cb216fc4ad0462dc7025b0da
-
SSDEEP
1536:aIU0q3RWuT4UgrrrrrMcSAvPCz1bTrc8Owh0fa:ZU0c0m421bTr/dh0fa
Malware Config
Extracted
njrat
0.7d
HacKed
lokman00.no-ip.biz:2500
811ce1caa45b8bd3b034ba6bd907b896
-
reg_key
811ce1caa45b8bd3b034ba6bd907b896
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
44b332c60837e8806d42ff8cc655d89b240903a3cea911149347573643658d3f.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ