Behavioral task
behavioral1
Sample
a0947aa23293cbd62533df794b4faf8e.exe
Resource
win7-20220812-en
General
-
Target
a0947aa23293cbd62533df794b4faf8e.exe
-
Size
23KB
-
MD5
a0947aa23293cbd62533df794b4faf8e
-
SHA1
f4d9134c1587503b9fc49c70c380da9cc3e8582a
-
SHA256
a7474e7815076c34f5be59697ed7e440b59177440d6e87dbbe587c00f370c6d1
-
SHA512
a9341a7c6f311b0ce6855cd7fe6bbdf33ac9130b628c353f1e2355d4b8f3b85a41eec96add76e8117e9a02395dfbbf3fd3a9bd0b637bbd85bc96b61dec96390b
-
SSDEEP
384:w/Kh2mZsxYY5fliOdecPFQ6Lg9gSZRr9mRvR6JZlbw8hqIusZzZtE:rlgPFdhRpcnuF
Malware Config
Extracted
njrat
0.7d
GHAWY HACKER EGYPT NjRat 0.7D v.2
uk-brakes.at.ply.gg:24598
971b96cdc98042f970cb9fe401797d6f
-
reg_key
971b96cdc98042f970cb9fe401797d6f
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
a0947aa23293cbd62533df794b4faf8e.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ