Behavioral task
behavioral1
Sample
7450551734b2c3f7eedc7fa53b1cc57cce426dcc80ccde51e4dd6f41b48a6948.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7450551734b2c3f7eedc7fa53b1cc57cce426dcc80ccde51e4dd6f41b48a6948.exe
Resource
win10v2004-20220901-en
General
-
Target
7450551734b2c3f7eedc7fa53b1cc57cce426dcc80ccde51e4dd6f41b48a6948
-
Size
22KB
-
MD5
e49d367eca285478e533b7e532c402a7
-
SHA1
86869314db5612391a6d67c3a86795e78a1dfbf6
-
SHA256
7450551734b2c3f7eedc7fa53b1cc57cce426dcc80ccde51e4dd6f41b48a6948
-
SHA512
f435e9dfaa21944bcc0e6000a2b65ca5689129084755545850c2aced762a21658574d08f9007626c03d1b03cb3f5017f7c0f80e3dd712775fb95dc178bbb4c7e
-
SSDEEP
384:zzm4pW/bJUQ74TO8GS2CY1r46JgfCciYdimRvR6JZlbw8hqIusZzZVhq:5Md4Bt2iRpcnuus
Malware Config
Extracted
njrat
0.7d
ضحيه من مواقع اجنبيه ^_^
r45w45e56464hw.no-ip.biz:1997
8947c14335bc754d5267266d28090b50
-
reg_key
8947c14335bc754d5267266d28090b50
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
7450551734b2c3f7eedc7fa53b1cc57cce426dcc80ccde51e4dd6f41b48a6948.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ