Behavioral task
behavioral1
Sample
4592f7e516708712367c4ffdac11b5b4ebee4d57cd6243962d2914d87bbea928.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4592f7e516708712367c4ffdac11b5b4ebee4d57cd6243962d2914d87bbea928.exe
Resource
win10v2004-20220812-en
General
-
Target
4592f7e516708712367c4ffdac11b5b4ebee4d57cd6243962d2914d87bbea928
-
Size
43KB
-
MD5
b00f2c524a71a6ccd711585cdac794f4
-
SHA1
fbd20099530b9bb8c17aee3c01442f7a7a6078f5
-
SHA256
4592f7e516708712367c4ffdac11b5b4ebee4d57cd6243962d2914d87bbea928
-
SHA512
b540e94bffb8e8d3485489e8959175c424087ce907a2468ee51c04b880f6d825ed484528d4acb32fa7bda3f0d86624e4c75975a2255d0816b186f75f49b3da47
-
SSDEEP
384:e8ZyCvGyCEFmVoybL/ldP8tm8CEdEDMghwzEIij+ZsNO3PlpJKkkjh/TzF7pWnuV:e6rvGyVAVlbL/l5knIggQuXQ/oT/+L
Malware Config
Extracted
njrat
Njrat 0.7 Golden By Hassan Amiri
HacKed
killtrchannel.hopto.org:5552
Windows Update
-
reg_key
Windows Update
-
splitter
|Hassan|
Signatures
-
Njrat family
Files
-
4592f7e516708712367c4ffdac11b5b4ebee4d57cd6243962d2914d87bbea928.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ