Behavioral task
behavioral1
Sample
72688d88b6bdfb4f04955ed75006045aacb9de6948060dfa5505ca78a63346c6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
72688d88b6bdfb4f04955ed75006045aacb9de6948060dfa5505ca78a63346c6.exe
Resource
win10v2004-20220812-en
General
-
Target
72688d88b6bdfb4f04955ed75006045aacb9de6948060dfa5505ca78a63346c6
-
Size
23KB
-
MD5
cdf92f91faf572cb725365d2735a9ddc
-
SHA1
52a34f5d356a0cfeb25e8f04b3daf18fd7c02780
-
SHA256
72688d88b6bdfb4f04955ed75006045aacb9de6948060dfa5505ca78a63346c6
-
SHA512
aebdb8ed07ea1c0861ad4254fe05cff9085aa23483a2a3c25205ae9e259d258a10ec63a57549bfe4ace7cb15091c7782512f6b9a6bb3999dc549aefeaab079c5
-
SSDEEP
384:34Q+SAN7uprgvM5OSUswZXg69gbm4hfpFmRvR6JZlbw8hqIusZzZJZ:vOaxVULRpcnuk
Malware Config
Extracted
njrat
0.7d
Hackad
kingmalkawe8.no-ip.biz:1177
563dc7a986ccffe8ceee1dfeb426317e
-
reg_key
563dc7a986ccffe8ceee1dfeb426317e
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
72688d88b6bdfb4f04955ed75006045aacb9de6948060dfa5505ca78a63346c6.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ