Behavioral task
behavioral1
Sample
1f1012a0fc8f090e1a0cbdc97f65d82a711c0f68c8696a7cbf5efb73bda9a3f8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1f1012a0fc8f090e1a0cbdc97f65d82a711c0f68c8696a7cbf5efb73bda9a3f8.exe
Resource
win10v2004-20221111-en
General
-
Target
1f1012a0fc8f090e1a0cbdc97f65d82a711c0f68c8696a7cbf5efb73bda9a3f8
-
Size
48KB
-
MD5
d84bfaeb0df1286f07e8db34a2d56cd8
-
SHA1
b41b38c3bed59ea961e825b499587a23ea3c9ac5
-
SHA256
1f1012a0fc8f090e1a0cbdc97f65d82a711c0f68c8696a7cbf5efb73bda9a3f8
-
SHA512
ff6810ef2066e40d255c753bad7e5453836590c1e936bddef9f61acff699acc623512a579674dcb5fd85ceeb76893d2426e69843985379dc0d8144823bc0b795
-
SSDEEP
384:Q4Q+SAN7uprgvM5OSUswZXg69gbm4hfpFmRvR6JZlbw8hqIusZzZtlp13hjn+9iQ:iOaxVULRpcnu4pzj+cJOSut6mMFTP6
Malware Config
Extracted
njrat
0.7d
مهم
amer12345nofal.no-ip.biz:5552
4c2a5c8711a2372b022ead8bdf55eaf5
-
reg_key
4c2a5c8711a2372b022ead8bdf55eaf5
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
1f1012a0fc8f090e1a0cbdc97f65d82a711c0f68c8696a7cbf5efb73bda9a3f8.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ