Behavioral task
behavioral1
Sample
f0f5864d2cd2c83b9bb4250476db3cafe33981b14906ac574e3d7e49bad8ce67.exe
Resource
win7-20221111-en
General
-
Target
f0f5864d2cd2c83b9bb4250476db3cafe33981b14906ac574e3d7e49bad8ce67
-
Size
29KB
-
MD5
3b932d7c05754cf5757908f7e0bbcb50
-
SHA1
a46a6f59ac111bbfeaed087f65e5855925cc0f59
-
SHA256
f0f5864d2cd2c83b9bb4250476db3cafe33981b14906ac574e3d7e49bad8ce67
-
SHA512
2339cbef5664c54585a094ac940c9b4a3625bc8f99d9e4297fb37a6986a6a147759ae0c7edebc8e889f7222c15aedf58adaad9729ab874691dc5e4fa4ba53ed6
-
SSDEEP
384:RNgJGJl7tj1MsagaF1+G5pdnGWmqDCbNhekcGBsbh0w4wlAokw9OhgOL1vYRGOZQ:Rd7nMsanZRnQqIXeOBKh0p29SgRqH
Malware Config
Extracted
njrat
0.6.4
HacKed
danamuhammad12.no-ip.org:4554
97335ed968c8d21501810d2516770677
-
reg_key
97335ed968c8d21501810d2516770677
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
f0f5864d2cd2c83b9bb4250476db3cafe33981b14906ac574e3d7e49bad8ce67.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ