Behavioral task
behavioral1
Sample
cam-chat.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cam-chat.exe
Resource
win10v2004-20221111-en
General
-
Target
ce9db0f1d82e37e641e24090b433d23b461ec8a2ae43c93251187372299cea37
-
Size
11KB
-
MD5
85e17c5e5da2b04f574ddb673c4fc8e2
-
SHA1
f5a699579ad38711411ac18ee871c86c3f4d2d22
-
SHA256
ce9db0f1d82e37e641e24090b433d23b461ec8a2ae43c93251187372299cea37
-
SHA512
5b8c6bbe8cd3250194774b39d078157e03a179621c24911d6681b554825cb8fea45a4a8493632bae848a231b32dff120c653954c4410d406d4abbda79b64adc4
-
SSDEEP
192:/BjOYbZ/ZdKsNE/ngHNVU9T0YQH0fG362S/gU18b+iVzVIkdyCaCI3Gxcv:/BOSZxlegEThQYU6PFi1VIkcCnIW6v
Malware Config
Extracted
njrat
0.7d
HacKed
younexshadow007.ddns.net:1177
a0a628f858740b0b676106501c15ff02
-
reg_key
a0a628f858740b0b676106501c15ff02
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
ce9db0f1d82e37e641e24090b433d23b461ec8a2ae43c93251187372299cea37.zip
-
cam-chat.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ