Behavioral task
behavioral1
Sample
798301c500221b4dd6c1a9da48b072d4b0cb4d5e1197cf5de6d887b2b27a6efa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
798301c500221b4dd6c1a9da48b072d4b0cb4d5e1197cf5de6d887b2b27a6efa.exe
Resource
win10v2004-20221111-en
General
-
Target
798301c500221b4dd6c1a9da48b072d4b0cb4d5e1197cf5de6d887b2b27a6efa
-
Size
23KB
-
MD5
7fc8280df342ffd91ecf6b111b82704e
-
SHA1
d3ead92ef2d3a928d1d17df20dbc045bd12b623a
-
SHA256
798301c500221b4dd6c1a9da48b072d4b0cb4d5e1197cf5de6d887b2b27a6efa
-
SHA512
9a26bd5f031170ba2384420f719e8982e9643b1b453e81a623f16a8da6f7f608c7bed647c8a7e6dcfb5f4bc6b6ebf7b37995d67dd502dc8e032ae99b2ce07ad6
-
SSDEEP
384:GluBPiZCMfdfSJrQbsLRGSIxYVL46pg/i8BD9BmRvR6JZlbw8hqIusZzZmz:pOmhtIiRpcnub
Malware Config
Extracted
njrat
0.7d
Victime
adelkabyle.no-ip.biz:1177
8765804f05506e2bf20cdfeb9d11a4c1
-
reg_key
8765804f05506e2bf20cdfeb9d11a4c1
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
798301c500221b4dd6c1a9da48b072d4b0cb4d5e1197cf5de6d887b2b27a6efa.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ