Behavioral task
behavioral1
Sample
bda69175386e0c22d8d18c20b3c547f8b999b7db09f654fc616329770753c2b8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bda69175386e0c22d8d18c20b3c547f8b999b7db09f654fc616329770753c2b8.exe
Resource
win10v2004-20220812-en
General
-
Target
bda69175386e0c22d8d18c20b3c547f8b999b7db09f654fc616329770753c2b8
-
Size
23KB
-
MD5
07243dc159ea383d716e508365f14cf9
-
SHA1
cc1a481de66edec9bae85331e91ce55d9333033f
-
SHA256
bda69175386e0c22d8d18c20b3c547f8b999b7db09f654fc616329770753c2b8
-
SHA512
2a8374d0d5d8977048e16b75aacda7d3b124bc48ffc8991615ed0dff7863955e2cf14bd63647e3ff442e29f5e6c9730b423eeae6357653c9d539bd3157eb8d91
-
SSDEEP
384:ZweXCQIreJig/8Z7SS1fEBpng6tgL2IBPZVmRvR6JZlbw8hqIusZzZk4:eLq411eRpcnuK
Malware Config
Extracted
njrat
0.7d
okd
muhammadali.ddns.net:1177
acb8fe13bacc51c60ff9569e601dbb18
-
reg_key
acb8fe13bacc51c60ff9569e601dbb18
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
bda69175386e0c22d8d18c20b3c547f8b999b7db09f654fc616329770753c2b8.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ