Behavioral task
behavioral1
Sample
fe7228132d5cc152b19753e6ab1602d3682648560e53200771324cf16d8ced05.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fe7228132d5cc152b19753e6ab1602d3682648560e53200771324cf16d8ced05.exe
Resource
win10v2004-20220901-en
General
-
Target
fe7228132d5cc152b19753e6ab1602d3682648560e53200771324cf16d8ced05
-
Size
23KB
-
MD5
d75174498aaeee9c3a6cb209e405f0ce
-
SHA1
f56dca2195f0527cb7d3ca866a990a8b6b4ceff5
-
SHA256
fe7228132d5cc152b19753e6ab1602d3682648560e53200771324cf16d8ced05
-
SHA512
26b0ce04f9df0094c40faf9c676f92458dea89c53d1fd49f6b595d82afb93aad73ecd584d6e8e4d8015f8f58f27c601e50da0b41608e23ad1a30460ec76ca6db
-
SSDEEP
384:Vc6CqbFYh3odrVCGiHssDB4b6i6fgpEupNXRmRvR6JZlbw8hqIusZzZNV:2IU0tw3RpcnuA
Malware Config
Extracted
njrat
0.7d
HacKed
thesidali007002.ddns.net:1177
74b3373ae601ffb0d22d98653aff8876
-
reg_key
74b3373ae601ffb0d22d98653aff8876
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
fe7228132d5cc152b19753e6ab1602d3682648560e53200771324cf16d8ced05.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ