Behavioral task
behavioral1
Sample
03d5ac9e6d7c931d28cc8e7d0a9466fd2b22da5f3781318c2fc231e961adb6b6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
03d5ac9e6d7c931d28cc8e7d0a9466fd2b22da5f3781318c2fc231e961adb6b6.exe
Resource
win10v2004-20221111-en
General
-
Target
03d5ac9e6d7c931d28cc8e7d0a9466fd2b22da5f3781318c2fc231e961adb6b6
-
Size
23KB
-
MD5
441c43955736fc45a466e3c0f4e8e5dd
-
SHA1
ce49815411216cf8d5ebad1b645dbed1430a3586
-
SHA256
03d5ac9e6d7c931d28cc8e7d0a9466fd2b22da5f3781318c2fc231e961adb6b6
-
SHA512
80a81b74b6feba5d9a41825ba5fe1948e3c209635e01781736c847f8433de5bba4e2ad0bd74a5974e278f2ed7e36251e40c3f06c36d0ac2db65a897474914e6e
-
SSDEEP
384:mY324bcgPiJLQrfARGSRUJzbY6wgvSMBD3t8mRvR6JZlbw8hqIusZzZpF:pL2s+tR0RpcnuQ
Malware Config
Extracted
njrat
0.7d
HacKed
drnaif.no-ip.biz:12
e9626867e41820058616ab1a50d4c610
-
reg_key
e9626867e41820058616ab1a50d4c610
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
03d5ac9e6d7c931d28cc8e7d0a9466fd2b22da5f3781318c2fc231e961adb6b6.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ