Behavioral task
behavioral1
Sample
f9594e56757e9ea47d5bf9c197f998c62b81210c5e0d09f48b5c338dd9760285.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f9594e56757e9ea47d5bf9c197f998c62b81210c5e0d09f48b5c338dd9760285.exe
Resource
win10v2004-20221111-en
General
-
Target
f9594e56757e9ea47d5bf9c197f998c62b81210c5e0d09f48b5c338dd9760285
-
Size
176KB
-
MD5
723bff1cecdb25f0e189903c3da43e37
-
SHA1
c29c78cb18f1241adc4f5d0586dcd8084fee7bf4
-
SHA256
f9594e56757e9ea47d5bf9c197f998c62b81210c5e0d09f48b5c338dd9760285
-
SHA512
7ebd55242947558e39153414620ee92f7e1d6b31331fdb03203e697c1b55c3a5cbbf9c41f837c9fba9b66585b0f8ddddf962fe43712c97d7c8487d9abca4c91f
-
SSDEEP
3072:2+RL0PoFS5rWGXBbxQx7fV0Gwtu2Bs7RfCAz2ZCnZSftPHuan/n7N/nAh/Q1Y/:HODXxyx504qcxCAyCMxOcn7N/Xe
Malware Config
Extracted
njrat
0.7d
HacKed
justme10.no-ip.org:1177
ed755b81076a7d6243f11a2d30431944
-
reg_key
ed755b81076a7d6243f11a2d30431944
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
f9594e56757e9ea47d5bf9c197f998c62b81210c5e0d09f48b5c338dd9760285.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 154KB - Virtual size: 153KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ