Behavioral task
behavioral1
Sample
60c92b1484d05f828c7ae2d26e5c3085254f0daa77d5aa4ea16d122b1c7b1202.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
60c92b1484d05f828c7ae2d26e5c3085254f0daa77d5aa4ea16d122b1c7b1202.exe
Resource
win10v2004-20220812-en
General
-
Target
60c92b1484d05f828c7ae2d26e5c3085254f0daa77d5aa4ea16d122b1c7b1202
-
Size
23KB
-
MD5
a4f1fc893750c12dff65d8ba3d398868
-
SHA1
a738d78c4875c2838102417a88bffaf346241a73
-
SHA256
60c92b1484d05f828c7ae2d26e5c3085254f0daa77d5aa4ea16d122b1c7b1202
-
SHA512
7083d9f1e4d34b282b248f7e885e19f3d27ec581dbbf87183564afba3974af1a2958413bbfaec3a4c7135a2ac763a50c1796b8d9e13a560f46dc5fc2ef162ac4
-
SSDEEP
384:zluBPiZCMfdfSJrQbsLRGSIxYVL46pg/i8BD9BmRvR6JZlbw8hqIusZzZ43:cOmhtIiRpcnu5
Malware Config
Extracted
njrat
0.7d
تم الدعس
asdf012.ddns.net:1425
bb05b991d21e21d0fd682d5f63984fc1
-
reg_key
bb05b991d21e21d0fd682d5f63984fc1
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
60c92b1484d05f828c7ae2d26e5c3085254f0daa77d5aa4ea16d122b1c7b1202.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ