Behavioral task
behavioral1
Sample
fa3feabd1307dfb8f8c731e14eb19b054ffc5ec5f1a0cf764af452b3e19ab5e6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fa3feabd1307dfb8f8c731e14eb19b054ffc5ec5f1a0cf764af452b3e19ab5e6.exe
Resource
win10v2004-20220812-en
General
-
Target
fa3feabd1307dfb8f8c731e14eb19b054ffc5ec5f1a0cf764af452b3e19ab5e6
-
Size
23KB
-
MD5
df0fbdb005bc04f21c2c6933eff2598e
-
SHA1
2ce8e55858a0dc42bb663292063eb7da73893d2e
-
SHA256
fa3feabd1307dfb8f8c731e14eb19b054ffc5ec5f1a0cf764af452b3e19ab5e6
-
SHA512
17a0771a37754b02f0efc31f1c478f7f226d96d8301733b0439ed3b501b9098291f13ae57233de9e87f6cb39c7557c657e571d8156aec688a845931709e8b787
-
SSDEEP
384:mMK6b2GZsx/Yr1+liORH1kcPFQ6Lg9gSOYRr9mRvR6JZlbw8hqIusZzZ2lTc:xb9glF51LRpcnublg
Malware Config
Extracted
njrat
0.7d
HacKed
eminem9989.ddns.net:1122
76419a4962ad85f506fbb6fce54fd5b4
-
reg_key
76419a4962ad85f506fbb6fce54fd5b4
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
fa3feabd1307dfb8f8c731e14eb19b054ffc5ec5f1a0cf764af452b3e19ab5e6.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ