Behavioral task
behavioral1
Sample
b6467f12445fa8a35a6e1fe2f64e6546acfcad7138d8a92aed8b716a95e8a6de.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b6467f12445fa8a35a6e1fe2f64e6546acfcad7138d8a92aed8b716a95e8a6de.exe
Resource
win10v2004-20220812-en
General
-
Target
b6467f12445fa8a35a6e1fe2f64e6546acfcad7138d8a92aed8b716a95e8a6de
-
Size
29KB
-
MD5
406e9bd332370a24422b663a55d8de2c
-
SHA1
286aa3bb7344444240f71e80f2de6e14424b1199
-
SHA256
b6467f12445fa8a35a6e1fe2f64e6546acfcad7138d8a92aed8b716a95e8a6de
-
SHA512
c0c0296d981b1f7c18bf090949f8c623e69ce4a001f334ccc46e440a48a6ac9c4b38f1e5da5f87bf8b67476d70cdec648296eda0d7d0c67a9191ddc7de78d755
-
SSDEEP
384:Rn0jZaBl7JXHU+WMyakbNl5ZgSjvSemqDyPrePsGBsbh0w4wlAokw9OhgOL1vYRb:R77BU+WPXRjvEq0renBKh0p29SgRhpn
Malware Config
Extracted
njrat
0.6.4
Hacked By Oussama
hcker17.no-ip.biz:1177
55b3825ee39ada2fcddf7c7accbde69e
-
reg_key
55b3825ee39ada2fcddf7c7accbde69e
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
b6467f12445fa8a35a6e1fe2f64e6546acfcad7138d8a92aed8b716a95e8a6de.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ