Behavioral task
behavioral1
Sample
7bccf3eb45b9e55f512c48f0483094548324acec30bf7b2d36b482c4970db66b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7bccf3eb45b9e55f512c48f0483094548324acec30bf7b2d36b482c4970db66b.exe
Resource
win10v2004-20220901-en
General
-
Target
7bccf3eb45b9e55f512c48f0483094548324acec30bf7b2d36b482c4970db66b
-
Size
29KB
-
MD5
d455a72cef13289b518e8c22c5fbdf88
-
SHA1
f3cc8a0563d0bac28a902dfb4f6b211d42384a5b
-
SHA256
7bccf3eb45b9e55f512c48f0483094548324acec30bf7b2d36b482c4970db66b
-
SHA512
010b4d463d23585ae997db9d4181f86604ba9493b81bf716f059bd8907712c858a488a77084479f950f70f46054eb32bf7a01676dcd9de8b38c3159105bf86c0
-
SSDEEP
384:K2WWNl73tesoMo3v/7R5grREGmqDGwJeAMGBsbh0w4wlAokw9OhgOL1vYRGOZzfm:97joMof/VKRKqvJeaBKh0p29SgRnxY
Malware Config
Extracted
njrat
0.6.4
الشبح العراقي هنأأأ
husooneahmed.ddns.net:666
5cb277ed285c9adfc0c8c9d42a1444a9
-
reg_key
5cb277ed285c9adfc0c8c9d42a1444a9
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
7bccf3eb45b9e55f512c48f0483094548324acec30bf7b2d36b482c4970db66b.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ