Behavioral task
behavioral1
Sample
e5bb67a72033c02a15451ea099296437ffdec80ae9839587bac8cfee78c25fe9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e5bb67a72033c02a15451ea099296437ffdec80ae9839587bac8cfee78c25fe9.exe
Resource
win10v2004-20220812-en
General
-
Target
e5bb67a72033c02a15451ea099296437ffdec80ae9839587bac8cfee78c25fe9
-
Size
29KB
-
MD5
6c8406a8f909d91df970f253b54cb877
-
SHA1
0bedd666b4b0d46b322bcc04e5952bc37c46fb36
-
SHA256
e5bb67a72033c02a15451ea099296437ffdec80ae9839587bac8cfee78c25fe9
-
SHA512
3c77cbadc549edcad444fc5cd331fbebd85ed0403fbfaaaa192408a06042e5d87369cc0813580ebc84538e8b896c9bfa882d0318e2ec82605191b8549e517d98
-
SSDEEP
768:nv77ucYfKQTtzjAvu3eUBKh0p29SgRuh:v7hWVU2ZKhG29juh
Malware Config
Extracted
njrat
0.6.4
hack20
gadahmed604.no-ip.org:1177
0d34b432548f2332ed0979498f855157
-
reg_key
0d34b432548f2332ed0979498f855157
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
e5bb67a72033c02a15451ea099296437ffdec80ae9839587bac8cfee78c25fe9.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ