Behavioral task
behavioral1
Sample
fff7d5f26c4357c5f731b0174b542b40d48265dac20d387993be6e708950a477.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fff7d5f26c4357c5f731b0174b542b40d48265dac20d387993be6e708950a477.exe
Resource
win10v2004-20221111-en
General
-
Target
fff7d5f26c4357c5f731b0174b542b40d48265dac20d387993be6e708950a477
-
Size
22KB
-
MD5
065150088150b601763bf6eb32529efd
-
SHA1
5e28035fff3f76c5cb753748006653f88f888cad
-
SHA256
fff7d5f26c4357c5f731b0174b542b40d48265dac20d387993be6e708950a477
-
SHA512
acaae4845b207be7f319da13d0f95af7ad374a56587ea35e8c4181c47a7e8eb46407b2364104a8a01c8f3dd2e60aaa5eeaf1069fa85df6dfc9c187c7b4d22488
-
SSDEEP
384:4sqS+ER6vRKXGYKRWVSujUtX9w6Dglo61Z5D8mRvR6JZlbw8hqIusZzZRFz:vf65K2Yf1jlRpcnuU
Malware Config
Extracted
njrat
0.7d
HacKed
ebo000000.ddns.net:5553
a4458faf28727c8f585dd4dc76455384
-
reg_key
a4458faf28727c8f585dd4dc76455384
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
fff7d5f26c4357c5f731b0174b542b40d48265dac20d387993be6e708950a477.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ