Behavioral task
behavioral1
Sample
beebaefc6362a666c2eecf681e8a42c0ec4b43f1d5d67a92f2346ad6099e4d65.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
beebaefc6362a666c2eecf681e8a42c0ec4b43f1d5d67a92f2346ad6099e4d65.exe
Resource
win10v2004-20221111-en
General
-
Target
beebaefc6362a666c2eecf681e8a42c0ec4b43f1d5d67a92f2346ad6099e4d65
-
Size
23KB
-
MD5
2ef75608898f7773416f8e58f615d2de
-
SHA1
3020c2ba83f92a1e314eb9d22426eae92c417b39
-
SHA256
beebaefc6362a666c2eecf681e8a42c0ec4b43f1d5d67a92f2346ad6099e4d65
-
SHA512
0efac3b3ad1f96e0e7f2c7ac215e1e2a2d8818fd7add247761eb3c2dffeebb5211531f0dd7928839f2864bf7b6e7eea8da5c6fc2e561d90dd50715f832a21a84
-
SSDEEP
384:YMKFYuEEhERvoBG16Xuy0MHNw6Tg1Y+75JTFmRvR6JZlbw8hqIusZzZ4C:vW4V6+yDRpcnuE
Malware Config
Extracted
njrat
0.7d
AdemHacKed
majhouljoker.ddns.net:1177
f72080b1e91ef18f175f72c58e105c74
-
reg_key
f72080b1e91ef18f175f72c58e105c74
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
beebaefc6362a666c2eecf681e8a42c0ec4b43f1d5d67a92f2346ad6099e4d65.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ