Behavioral task
behavioral1
Sample
ef12380ad88dc9c900dbd23927464736be19a6b924cc518c6798d665fa6c8691.exe
Resource
win7-20220812-en
General
-
Target
ef12380ad88dc9c900dbd23927464736be19a6b924cc518c6798d665fa6c8691
-
Size
29KB
-
MD5
8cb8515ebf210e4a22d74ab1ce69e188
-
SHA1
3ce64d2da53547967bd2f56684ab9cfddb4926ee
-
SHA256
ef12380ad88dc9c900dbd23927464736be19a6b924cc518c6798d665fa6c8691
-
SHA512
5bc40803b0e4fb1558f33a7dab7deae0ea9ee7379c9984acebd0f7551967b2010fd076afb781d78c444e3a91bbbf220f71e87c2b30b8b44708549f188c24a21b
-
SSDEEP
384:xFUHEBl7p3hUw2s7bD55gEKemqDSqre/IDGBsbh0w4wlAokw9OhgOL1vYRGOZzXU:x57bUw2C3kEcqNreHBKh0p29SgRvFW
Malware Config
Extracted
njrat
0.6.4
HacKed
moadali.no-ip.info:1177
5cd8f17f4086744065eb0992a09e05a2
-
reg_key
5cd8f17f4086744065eb0992a09e05a2
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
ef12380ad88dc9c900dbd23927464736be19a6b924cc518c6798d665fa6c8691.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ