Behavioral task
behavioral1
Sample
a8f6959db7c121c357f69613228dbb009228390b5196db83fce13e4984fede72.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a8f6959db7c121c357f69613228dbb009228390b5196db83fce13e4984fede72.exe
Resource
win10v2004-20221111-en
General
-
Target
a8f6959db7c121c357f69613228dbb009228390b5196db83fce13e4984fede72
-
Size
245KB
-
MD5
76775798d1ab94673752215647bdc62d
-
SHA1
130d88b81cb453a623f9fde4d205823fe26fa41d
-
SHA256
a8f6959db7c121c357f69613228dbb009228390b5196db83fce13e4984fede72
-
SHA512
228c5af8c9cdbe7c3af44487c2e76d0168f84dd6de65e50e6e37c46385cd4ee01d7d70c5f83a31a451e5fe85ce1348a9526a25fdeab7d5a6632ccc6c8c05e518
-
SSDEEP
3072:PYfc0jopVXnmjdhtluDUShxplYkGu/wgJcymulrKJrgx:sK3m5hgLYkfJwc
Malware Config
Extracted
njrat
0.7d
HacKed
swordfish.no-ip.biz:1177
d2c5d2fd43f85def60827e6056444d08
-
reg_key
d2c5d2fd43f85def60827e6056444d08
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
a8f6959db7c121c357f69613228dbb009228390b5196db83fce13e4984fede72.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 222KB - Virtual size: 222KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ