Behavioral task
behavioral1
Sample
39db1b79de11173ee66c9b5eac3ee0afaea44c2c064264c33eb9e9eaf9998fa1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
39db1b79de11173ee66c9b5eac3ee0afaea44c2c064264c33eb9e9eaf9998fa1.exe
Resource
win10v2004-20221111-en
General
-
Target
39db1b79de11173ee66c9b5eac3ee0afaea44c2c064264c33eb9e9eaf9998fa1
-
Size
89KB
-
MD5
163da38a8b9e7bf63b1be4c7fa6e0b0e
-
SHA1
1987c84460813b1c51cb335d9e0d61fbf33c6df6
-
SHA256
39db1b79de11173ee66c9b5eac3ee0afaea44c2c064264c33eb9e9eaf9998fa1
-
SHA512
de73fedceb2d43fbecb343f13837631904de9356db90c8a2eb5400f3e27f95c7c7a375966a8e20a4b7a05bba55a69a1f9bca2eb31fe0bdbdb3dc3c33eaa3dad9
-
SSDEEP
1536:QN0X/AARWustQ08UreN3B8J1pCDWTtln/gakphoAJae93A1RS4cM:i0X903AJae93A1
Malware Config
Extracted
njrat
0.7d
Skype For Hack
sakarsakar.no-ip.biz:5552
2f46e1c9317b4792f60fca96d07d4d7d
-
reg_key
2f46e1c9317b4792f60fca96d07d4d7d
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
39db1b79de11173ee66c9b5eac3ee0afaea44c2c064264c33eb9e9eaf9998fa1.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ