Behavioral task
behavioral1
Sample
6cce51eb2c9390466765fc65cb6b641f4cf17e63debe1c8473ae213832736255.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6cce51eb2c9390466765fc65cb6b641f4cf17e63debe1c8473ae213832736255.exe
Resource
win10v2004-20220901-en
General
-
Target
6cce51eb2c9390466765fc65cb6b641f4cf17e63debe1c8473ae213832736255
-
Size
23KB
-
MD5
f965837a659defdd01d3e229b1fa4787
-
SHA1
4ab7d081f41f6be65a92cc803cd6ef3b907ec1bc
-
SHA256
6cce51eb2c9390466765fc65cb6b641f4cf17e63debe1c8473ae213832736255
-
SHA512
36c3b3c93da2e1e10ef4ae712f88babd62f46325cc19e21522ef052e953ec95f395196ad81cfadd9a9689ef4428d967c0a9ef7d0556777e2d2597e0a7706cd31
-
SSDEEP
384:wwz6+T4IjWZFNwXU0eiNUBdvt6lgT+lLOhXxQmRvR6JZlbw8hqIusZzZq/t:7TbC81NgRpcnuFV
Malware Config
Extracted
njrat
0.7d
menage
abdou1230.no-ip.biz:4444
a35306dc5b2ea678de36a98234d7723f
-
reg_key
a35306dc5b2ea678de36a98234d7723f
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
6cce51eb2c9390466765fc65cb6b641f4cf17e63debe1c8473ae213832736255.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ