Behavioral task
behavioral1
Sample
14ccf9a3f71d243498d7d67ef46a737120f0b93cff0d22452d2778e98bfe9be5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
14ccf9a3f71d243498d7d67ef46a737120f0b93cff0d22452d2778e98bfe9be5.exe
Resource
win10v2004-20220812-en
General
-
Target
14ccf9a3f71d243498d7d67ef46a737120f0b93cff0d22452d2778e98bfe9be5
-
Size
23KB
-
MD5
9587160415f93c3770424dd5080a28c9
-
SHA1
2b9e0b62d40d5c35c70c0e085a19de2d2b4c2233
-
SHA256
14ccf9a3f71d243498d7d67ef46a737120f0b93cff0d22452d2778e98bfe9be5
-
SHA512
3788adba2a7c3b92a57516fef0d6c16fa0bad394e013cc749f23957c6c8b0fbf606e35ec25db6d2bddb6d1d19f42bf304380db064b70dd658546094ab4cd8e1b
-
SSDEEP
384:3zmicUDPiJUQrlRGSHCYlbY6ZgvSMBTtxmRvR6JZlbw8hqIusZzZ7z0:HpD2btHxRpcnur
Malware Config
Extracted
njrat
0.7d
HacKed by mahmoud samir
princemahmoudsamir.no-ip.biz:5552
c05397a2c4de5ef2ca5d2701c1ecea3e
-
reg_key
c05397a2c4de5ef2ca5d2701c1ecea3e
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
14ccf9a3f71d243498d7d67ef46a737120f0b93cff0d22452d2778e98bfe9be5.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ