Behavioral task
behavioral1
Sample
138b4e08ef973b3fbfbe909cdd564fb22d62d1c4f5608a125460360f1bd784ca.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
138b4e08ef973b3fbfbe909cdd564fb22d62d1c4f5608a125460360f1bd784ca.exe
Resource
win10v2004-20220812-en
General
-
Target
138b4e08ef973b3fbfbe909cdd564fb22d62d1c4f5608a125460360f1bd784ca
-
Size
23KB
-
MD5
e597489c1113cae9dc41c5c965ab6ba5
-
SHA1
aaafddbe3c3d959175d3601a15a862b10df2d383
-
SHA256
138b4e08ef973b3fbfbe909cdd564fb22d62d1c4f5608a125460360f1bd784ca
-
SHA512
a2026d67b9a9dbdc52d210f95c588e9d3b63cc8975d0e76e740d6ac3aef5eebf3cf1e12d7140261d1daf75b159ec3ba478d1161d79bef538ef13a473b0c859bd
-
SSDEEP
384:6sqCm6yocx/Yp7jemiO0nd08/VQ6bgNQC5h7tmRvR6JZlbw8hqIusZzZsq:lSoQA6mlcrRpcnuQ
Malware Config
Extracted
njrat
0.7d
HacKed
ahmednasser201523.no-ip.biz:1177
42d8688422653f63709244617a5b8192
-
reg_key
42d8688422653f63709244617a5b8192
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
138b4e08ef973b3fbfbe909cdd564fb22d62d1c4f5608a125460360f1bd784ca.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ