Behavioral task
behavioral1
Sample
00f0369de3c90b4039d12110c8f8a807c114b58dbb6b0ab074b31831caea0b53.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
00f0369de3c90b4039d12110c8f8a807c114b58dbb6b0ab074b31831caea0b53.exe
Resource
win10v2004-20220812-en
General
-
Target
00f0369de3c90b4039d12110c8f8a807c114b58dbb6b0ab074b31831caea0b53
-
Size
29KB
-
MD5
d77443c7e7f5f25a30c9f21776909dda
-
SHA1
818eede7e91f74cef91074d2677d25ebfcdb8aa0
-
SHA256
00f0369de3c90b4039d12110c8f8a807c114b58dbb6b0ab074b31831caea0b53
-
SHA512
3765c24153ce43314e14d8e04f1475219579ca68f6a88c76f601e10f9465590f28a1295ca3cce134f6cbcb8bb00885dd0109804d9b21ea50ce59dfb0c84b3c2e
-
SSDEEP
384:8f8EBl7Bvgk4Xe0err5RhVNaemqDq9xrefTGBsbh0w4wlAokw9OhgOL1vYRGOZzh:877Kk4XeP/Fzsq+xre6BKh0p29SgRHZ
Malware Config
Extracted
njrat
0.6.4
HacKed
harbahawas.ddns.net:1177
b3ef0ad506fa056cb62b3b29adf1fd89
-
reg_key
b3ef0ad506fa056cb62b3b29adf1fd89
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
00f0369de3c90b4039d12110c8f8a807c114b58dbb6b0ab074b31831caea0b53.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ