Behavioral task
behavioral1
Sample
38191a0b4ec06f9ffc839607699bc09c7b69ca5922dc65f6308c83e7373b410b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
38191a0b4ec06f9ffc839607699bc09c7b69ca5922dc65f6308c83e7373b410b.exe
Resource
win10v2004-20221111-en
General
-
Target
38191a0b4ec06f9ffc839607699bc09c7b69ca5922dc65f6308c83e7373b410b
-
Size
29KB
-
MD5
e508c22bc48328dccbae5284ae891540
-
SHA1
e3a32f9a01fb609a9af4b211368c43f2a6c8fa02
-
SHA256
38191a0b4ec06f9ffc839607699bc09c7b69ca5922dc65f6308c83e7373b410b
-
SHA512
a404ea860aae248a0b569452e8a8c6416054d4aec4c13ff4f83f10a4aa2b2ae969db37ef04da975249b4e991500c8bccf08fb58b67adba6217fa9cf8a7df0ec2
-
SSDEEP
384:iQXpl7dzns8oDw/Lvn5lOTQiWmqDuOOeIbGBsbh0w4wlAokw9OhgOL1vYRGOZzen:H7Js8oDSDuTQ8qNOeXBKh0p29SgRoZ
Malware Config
Extracted
njrat
0.6.4
HacKed
almansi.ddns.net:1177
9ae5a344fecf764fcd92fa4a0c8823d0
-
reg_key
9ae5a344fecf764fcd92fa4a0c8823d0
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
38191a0b4ec06f9ffc839607699bc09c7b69ca5922dc65f6308c83e7373b410b.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ