Behavioral task
behavioral1
Sample
f99281732a608da139c6b49292a03f8ef779abef062204f676e663a0558f1e7b.exe
Resource
win7-20220901-en
General
-
Target
f99281732a608da139c6b49292a03f8ef779abef062204f676e663a0558f1e7b
-
Size
119KB
-
MD5
28664307a1cb25d818385742f3166569
-
SHA1
c1f184c1617daff5f7674927704df95b213094d4
-
SHA256
f99281732a608da139c6b49292a03f8ef779abef062204f676e663a0558f1e7b
-
SHA512
0ddd7b298f4a616b68f6ea64caf7b465f9da2b7dcc97ca5861f0ef82000ceebacad4d54f9f2176243d0a4573a0db6a5379af1d026cd65bc0612b74d36aed059f
-
SSDEEP
3072:NglF0wJfbXgPgUzPZcsBMkfxE9ZtE/4Z34no4:olbON9/fxWZtu4Z3A/
Malware Config
Extracted
njrat
0.7d
HacKed
saoudi-004.ddns.net:1177
402b24952a2e3bf2083ce4281215f2fe
-
reg_key
402b24952a2e3bf2083ce4281215f2fe
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
f99281732a608da139c6b49292a03f8ef779abef062204f676e663a0558f1e7b.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ