Behavioral task
behavioral1
Sample
0c2f943299de5d0eba753ac8a2399d495e8c1f407aac21d879473c27ad507068.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0c2f943299de5d0eba753ac8a2399d495e8c1f407aac21d879473c27ad507068.exe
Resource
win10v2004-20220812-en
General
-
Target
0c2f943299de5d0eba753ac8a2399d495e8c1f407aac21d879473c27ad507068
-
Size
23KB
-
MD5
4326db97c6bc88cf4b13ba19c1db6f3c
-
SHA1
beaeb494f18eeff5e4032f62796045aa64f22dd0
-
SHA256
0c2f943299de5d0eba753ac8a2399d495e8c1f407aac21d879473c27ad507068
-
SHA512
6c2d7306d45ff03404673ec413863e9818973a1a9884cb8575a3f22d1ce939f52ff7f45685b3ba4aaa3552e84181c15c745d33a4c74685a030256073cbb40e87
-
SSDEEP
384:53gexUw/L+JrgUon5b9uSDMwT9Pfg6NgrWoBYi51mRvR6JZlbw8hqIusZzZG1:VIAKG91DP1hPRpcnuF
Malware Config
Extracted
njrat
0.7d
HacKed BY BALA
baladarin3.no-ip.biz:1177
c5e48e93dfd56c12557f20e2a6cda406
-
reg_key
c5e48e93dfd56c12557f20e2a6cda406
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
0c2f943299de5d0eba753ac8a2399d495e8c1f407aac21d879473c27ad507068.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ