Behavioral task
behavioral1
Sample
0dfeeb2cf4877b8ea458103acb1f6e2746e957035de9a2aa1c1999c12a1d7916.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0dfeeb2cf4877b8ea458103acb1f6e2746e957035de9a2aa1c1999c12a1d7916.exe
Resource
win10v2004-20220812-en
General
-
Target
0dfeeb2cf4877b8ea458103acb1f6e2746e957035de9a2aa1c1999c12a1d7916
-
Size
29KB
-
MD5
d9fd6361df57d0f04e2e60ad5c0c27b5
-
SHA1
9cb80c103be842abcde2741c1186bf287db949c9
-
SHA256
0dfeeb2cf4877b8ea458103acb1f6e2746e957035de9a2aa1c1999c12a1d7916
-
SHA512
4973aba60ad83262fce0d2d0c24cc927085e3e31b6c47fb304954f954a650dd65c09fde392d1a50aac2deed0cb243749b8c4f2b94ada43683eac74bfd3176c35
-
SSDEEP
768:M7JEWe4PVzdmBRbqELeuBKh0p29SgRiB:M7JbhmBRblrKhG29jiB
Malware Config
Extracted
njrat
0.6.4
HacKed BY BALA
baladarin3.no-ip.biz:81
e79d569ba77562f0d4316e586835f0a2
-
reg_key
e79d569ba77562f0d4316e586835f0a2
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
0dfeeb2cf4877b8ea458103acb1f6e2746e957035de9a2aa1c1999c12a1d7916.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ