Behavioral task
behavioral1
Sample
d89aac515eb7a4b5799be662c5e74e60e83b0bb09a75c367052973a9e43ec7c0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d89aac515eb7a4b5799be662c5e74e60e83b0bb09a75c367052973a9e43ec7c0.exe
Resource
win10v2004-20220812-en
General
-
Target
d89aac515eb7a4b5799be662c5e74e60e83b0bb09a75c367052973a9e43ec7c0
-
Size
23KB
-
MD5
e339f0c2452f57c995640c9663e9c74b
-
SHA1
a1cca2b8789b2a287529f81126059254cb4c1053
-
SHA256
d89aac515eb7a4b5799be662c5e74e60e83b0bb09a75c367052973a9e43ec7c0
-
SHA512
89c1ee3f0edf5fd61ec4376411369d78cc18fa9e0c32dda26d002305ff616b9e454395c79c526abcb978b47348a7fa46ad4d4fbf0667c680d90efbf52ca59088
-
SSDEEP
384:XMK6b2GZsx/Yr1+liORH1kcPFQ6Lg9gSOYRr9mRvR6JZlbw8hqIusZzZiqN:wb9glF51LRpcnuNy
Malware Config
Extracted
njrat
0.7d
MRAKHAF
isuero.no-ip.info:1990
eded8ce0cce4bae66af70ac7c7464702
-
reg_key
eded8ce0cce4bae66af70ac7c7464702
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
d89aac515eb7a4b5799be662c5e74e60e83b0bb09a75c367052973a9e43ec7c0.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ