Behavioral task
behavioral1
Sample
27726719fef9353269c479b5bdb01668751bfb9efffd9f8b13b28d197fa81630.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
27726719fef9353269c479b5bdb01668751bfb9efffd9f8b13b28d197fa81630.exe
Resource
win10v2004-20220812-en
General
-
Target
27726719fef9353269c479b5bdb01668751bfb9efffd9f8b13b28d197fa81630
-
Size
23KB
-
MD5
5d1f987ad69659638904af6fc6ae7ac5
-
SHA1
d789bc2c58728c3768e32564eea64441c9766f4d
-
SHA256
27726719fef9353269c479b5bdb01668751bfb9efffd9f8b13b28d197fa81630
-
SHA512
fcaabb9db9cda1769bd7824f0cd0394d7051307f35e52c69419f1eaf07524f762227f917a6fc93e6eca373cb1fd23c529ac138e272f4d5471a38ef34222bc937
-
SSDEEP
384:pQ+ILgIbOprgPsUOSU0kB1kd6dg7GYh/J0mRvR6JZlbw8hqIusZzZEE:cLL6MVU0pRpcnuW
Malware Config
Extracted
njrat
0.7d
HacKed
scoh.no-ip.biz:5552
89b99279c136a3163fc1763be39be2c8
-
reg_key
89b99279c136a3163fc1763be39be2c8
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
27726719fef9353269c479b5bdb01668751bfb9efffd9f8b13b28d197fa81630.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ