Behavioral task
behavioral1
Sample
050a12ce219076e34128483478f8f227ab911b1743426b368630143d5db733af.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
050a12ce219076e34128483478f8f227ab911b1743426b368630143d5db733af.exe
Resource
win10v2004-20221111-en
General
-
Target
050a12ce219076e34128483478f8f227ab911b1743426b368630143d5db733af
-
Size
31KB
-
MD5
587c8fe806c66acdde28b84ff2a9c8e0
-
SHA1
6024d735a7fc928c14832214b3aee9694c5ef461
-
SHA256
050a12ce219076e34128483478f8f227ab911b1743426b368630143d5db733af
-
SHA512
48cccc1352b1abf4154aae804775e872f8101fd075039dd58a4e459e47401e408b198576da041102f0d78f0232dbf8432d0900b1d61315195865edc8b6a91e33
-
SSDEEP
768:nD71oGc1FRVp74q8HesBKh0p29SgROvt:nD71IPkpZKhG29jOv
Malware Config
Extracted
njrat
0.6.4
HacKed
vpn-hacker.no-ip.biz:1177
8661dfc4f82434cf2194d7352e843241
-
reg_key
8661dfc4f82434cf2194d7352e843241
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
050a12ce219076e34128483478f8f227ab911b1743426b368630143d5db733af.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ