Behavioral task
behavioral1
Sample
dc7c7d955056b7541a75756878e60b0a79c076aaf2c0564f85562d21d11471f4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
dc7c7d955056b7541a75756878e60b0a79c076aaf2c0564f85562d21d11471f4.exe
Resource
win10v2004-20221111-en
General
-
Target
dc7c7d955056b7541a75756878e60b0a79c076aaf2c0564f85562d21d11471f4
-
Size
217KB
-
MD5
c6f022e0abfc8c61eb604a12518e4564
-
SHA1
ca449a1996a855f5bd1fba902bc694c6355acc98
-
SHA256
dc7c7d955056b7541a75756878e60b0a79c076aaf2c0564f85562d21d11471f4
-
SHA512
efd620a4cbbb22021f053c870c53163cc674ac9b954fcd1383f442d215295233358d3ce040772cf068a7e846734fa7c1253b6ce3bfbbd0e0408f0e1698e33d0c
-
SSDEEP
3072:qxLTA29k/xr+VBFaImYIYiheeeeeeeeefYDeOiClppeppOpplppepppDppptpppd:29kZrMBgJSOG9iO2RK
Malware Config
Extracted
njrat
0.6.4
-_-
husooneahmed.ddns.net:666
d5a38e9b5f206c41f8851bf04a251d26
-
reg_key
d5a38e9b5f206c41f8851bf04a251d26
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
dc7c7d955056b7541a75756878e60b0a79c076aaf2c0564f85562d21d11471f4.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 189KB - Virtual size: 189KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ