Behavioral task
behavioral1
Sample
030147711055b506b779bca806c716ef67b01e5556ab4654951d964919b539a6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
030147711055b506b779bca806c716ef67b01e5556ab4654951d964919b539a6.exe
Resource
win10v2004-20220901-en
General
-
Target
030147711055b506b779bca806c716ef67b01e5556ab4654951d964919b539a6
-
Size
23KB
-
MD5
36831e2a7ee38f2fbf0768b351ffbdfd
-
SHA1
c18f661fe3209d742d70d48068a9ae524e0fa112
-
SHA256
030147711055b506b779bca806c716ef67b01e5556ab4654951d964919b539a6
-
SHA512
fcb023656fc168a5cfc230a59ac0766c1309630905c18526f99e6023715a2a16f44e96412a76e7dae5f15b4c4db4f2c35344d712038d327b30e402ea4467ebc2
-
SSDEEP
384:Ej8aZYC9twBNdcvFaly2H0dbJo6HghcASEJqc/ZmRvR6JZlbw8hqIusZzZq7:EXY+sNKqNHnSdRpcnur
Malware Config
Extracted
njrat
0.7d
HacKed
haker7up.noip.me:1515
39efd026a50bd6ab7d69cfce584038f2
-
reg_key
39efd026a50bd6ab7d69cfce584038f2
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
030147711055b506b779bca806c716ef67b01e5556ab4654951d964919b539a6.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ