Behavioral task
behavioral1
Sample
fb33754cbb12685d0702e0b0401aed399a60695339ae3b420e5cacd67a6d7735.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fb33754cbb12685d0702e0b0401aed399a60695339ae3b420e5cacd67a6d7735.exe
Resource
win10v2004-20220812-en
General
-
Target
fb33754cbb12685d0702e0b0401aed399a60695339ae3b420e5cacd67a6d7735
-
Size
23KB
-
MD5
2d5cdb9213219ea91bbf805a1011a56e
-
SHA1
6403d2c6930e219badde4f03c3b512aa784bee1f
-
SHA256
fb33754cbb12685d0702e0b0401aed399a60695339ae3b420e5cacd67a6d7735
-
SHA512
d7bedfb8b4fec813aa3d4cd118dbf5fa46dd136311bd01a7eaee3d1a8f519e5b56ec8cc38714bbd0d0d0c656c060e37009085025826147ceb349888ad4533499
-
SSDEEP
384:bQeCo2zmZbQHkJeCdUwBvQ61gjuQBnB9mRvR6JZlbw8hqIusZzZW1k:c5yBVd7RpcnuDS
Malware Config
Extracted
njrat
0.7d
HacKed
kingos1112.no-ip.biz:5552
2e339ad3c1e6687b461eadf63b568407
-
reg_key
2e339ad3c1e6687b461eadf63b568407
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
fb33754cbb12685d0702e0b0401aed399a60695339ae3b420e5cacd67a6d7735.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ