Behavioral task
behavioral1
Sample
5d5c564e07633ed153f43258e8a30d5ea84edb27f6610f176ba0efcf9fe47c6d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5d5c564e07633ed153f43258e8a30d5ea84edb27f6610f176ba0efcf9fe47c6d.exe
Resource
win10v2004-20220812-en
General
-
Target
5d5c564e07633ed153f43258e8a30d5ea84edb27f6610f176ba0efcf9fe47c6d
-
Size
23KB
-
MD5
c6bf65093c539b9e00fd0ff06f047ea0
-
SHA1
7c6db5adcdbb4e3c2e973589c2ceea5549b8014d
-
SHA256
5d5c564e07633ed153f43258e8a30d5ea84edb27f6610f176ba0efcf9fe47c6d
-
SHA512
2654f7395455f8e23880946c2a205a583dbeb2a243ea755ef21273abbe20a91c977df5df034a5fdd0cf820e0bbf86602c2380ef50ee5b20d506fd1988e3b3e0c
-
SSDEEP
384:FT+yN4WjWZMwX27leisawR/w6lgT+ghXxNmRvR6JZlbw8hqIusZzZ/e+L:ZxC8l1stRpcnuYeo
Malware Config
Extracted
njrat
0.7d
ضحايا جديدة
mohammadbkar.no-ip.biz:1177
9a273c7ca0f3d71d1f974b005231983a
-
reg_key
9a273c7ca0f3d71d1f974b005231983a
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
5d5c564e07633ed153f43258e8a30d5ea84edb27f6610f176ba0efcf9fe47c6d.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ