Behavioral task
behavioral1
Sample
9cca36ca678674f5af092056ff2877a4e9806097c0147c2041f2dd7c6552609d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9cca36ca678674f5af092056ff2877a4e9806097c0147c2041f2dd7c6552609d.exe
Resource
win10v2004-20220812-en
General
-
Target
9cca36ca678674f5af092056ff2877a4e9806097c0147c2041f2dd7c6552609d
-
Size
23KB
-
MD5
36486c8261496b5238c0e0bb0ca4ee0c
-
SHA1
973d66a0ce3e06929fc64a177031a8d33ea8c695
-
SHA256
9cca36ca678674f5af092056ff2877a4e9806097c0147c2041f2dd7c6552609d
-
SHA512
f751b443f07d9a1a1059a56545430a3c472351848c2c3c9d9d40ae0aa1500b69928fe355096e67646dd17f56e402604e81674d04a9f69a12f73a3aed14c46436
-
SSDEEP
384:k3gexUw/L+JrgUon5b9uSDMwT9Pfg6NgrWoBYi51mRvR6JZlbw8hqIusZzZClh:yIAKG91DP1hPRpcnuH
Malware Config
Extracted
njrat
0.7d
dARKh0RSE
darkhorsehacker.no-ip.biz:1998
120286aca49ad6b310447e929d217b5a
-
reg_key
120286aca49ad6b310447e929d217b5a
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
9cca36ca678674f5af092056ff2877a4e9806097c0147c2041f2dd7c6552609d.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ