Behavioral task
behavioral1
Sample
9387753971c8b749b4edef686758f94018543fc84c65975eff71a5daefd98494.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9387753971c8b749b4edef686758f94018543fc84c65975eff71a5daefd98494.exe
Resource
win10v2004-20220812-en
General
-
Target
9387753971c8b749b4edef686758f94018543fc84c65975eff71a5daefd98494
-
Size
368KB
-
MD5
ad0fa345b71a76b8d15c94bec1a1f4f6
-
SHA1
f029a767679d8f203d3b631e79b9391a9d7c1879
-
SHA256
9387753971c8b749b4edef686758f94018543fc84c65975eff71a5daefd98494
-
SHA512
670aa1273c71e9fde7a5e8093d6e9c9dc743c5b87cf9cdeb31d30c9059e77511595abfe791d824eca1f012ad55ea08b3c4c518ee2ae92deaa22ac96480190f14
-
SSDEEP
3072:60py5k0ogEyQdvbj/AbOlm+Qm2Ij8uluvXLonyAKaLap2F3glH/EHnPBM3ZwCr2B:
Malware Config
Extracted
njrat
0.7d
HacKed
185.20.224.121:80
ab66a766385428849b68a77f294c8ace
-
reg_key
ab66a766385428849b68a77f294c8ace
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
9387753971c8b749b4edef686758f94018543fc84c65975eff71a5daefd98494.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 346KB - Virtual size: 345KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ