Behavioral task
behavioral1
Sample
c9d944e5b381ba0475b88d52fa96b9d2690bbd3fa260aa24148625f024f2fc38.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c9d944e5b381ba0475b88d52fa96b9d2690bbd3fa260aa24148625f024f2fc38.exe
Resource
win10v2004-20221111-en
General
-
Target
c9d944e5b381ba0475b88d52fa96b9d2690bbd3fa260aa24148625f024f2fc38
-
Size
29KB
-
MD5
37c960b09fd5281ea1d11e799d98d5f0
-
SHA1
a33c6a07b4c38e0bf9850b501fd578292fe9bfe0
-
SHA256
c9d944e5b381ba0475b88d52fa96b9d2690bbd3fa260aa24148625f024f2fc38
-
SHA512
21cdf8680b7eb9518fc58aa9d55452cd549edc08790964da843986ed260afdcbf296061dfa0eb8f0e83122269c8786a5aa02d319e878327174e92165b0c8b478
-
SSDEEP
768:xUi71MHaSf0gsHwqIXeyBKh0p29SgR5H:x71miQBjKhG29j5H
Malware Config
Extracted
njrat
0.6.4
صالح كوباني vpn
freepage.sytes.net:1999
d5a38e9b5f206c41f8851bf04a251d26
-
reg_key
d5a38e9b5f206c41f8851bf04a251d26
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
c9d944e5b381ba0475b88d52fa96b9d2690bbd3fa260aa24148625f024f2fc38.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ