Behavioral task
behavioral1
Sample
9701bc6d894c1f4f2390c3edae66a050b985ffc2ad3fcd8900f25df271475782.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9701bc6d894c1f4f2390c3edae66a050b985ffc2ad3fcd8900f25df271475782.exe
Resource
win10v2004-20220812-en
General
-
Target
9701bc6d894c1f4f2390c3edae66a050b985ffc2ad3fcd8900f25df271475782
-
Size
23KB
-
MD5
06cb3290c4f5e2e4364509662f6311fe
-
SHA1
8b951a3ce812a5aa521645f530b076fad2883e68
-
SHA256
9701bc6d894c1f4f2390c3edae66a050b985ffc2ad3fcd8900f25df271475782
-
SHA512
a77de04ae57e8db4f908ec9e1a2e5ddedcb01fa6ed9d431ce754c006f0afe9b17bad087922b31cf307eff56bb3ebcd0cb7124f80133bff49bc3634e5de097ec8
-
SSDEEP
384:i8aZYC9twBNdcvFaly2H0dbJo6HghcASEJqc/ZmRvR6JZlbw8hqIusZzZHS:cY+sNKqNHnSdRpcnu1
Malware Config
Extracted
njrat
0.7d
HacKed
bdf2015.ddns.net:5552
7625f6c12d9636ac9612fb3e1603e1ee
-
reg_key
7625f6c12d9636ac9612fb3e1603e1ee
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
9701bc6d894c1f4f2390c3edae66a050b985ffc2ad3fcd8900f25df271475782.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ