Static task
static1
Behavioral task
behavioral1
Sample
c522d9973750b509bea999d0854cd21bfbf854aef3c6e2bfcb041c61f22c42d1.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
c522d9973750b509bea999d0854cd21bfbf854aef3c6e2bfcb041c61f22c42d1.exe
Resource
win10v2004-20220414-en
General
-
Target
c522d9973750b509bea999d0854cd21bfbf854aef3c6e2bfcb041c61f22c42d1
-
Size
37KB
-
MD5
2333a7b5b03e3fa1bd77b635e0a7f0df
-
SHA1
984a1120d48af498288e8ef09f49d8989e0d1aff
-
SHA256
c522d9973750b509bea999d0854cd21bfbf854aef3c6e2bfcb041c61f22c42d1
-
SHA512
504063f2913ba7b1ff8dd5a0eee97f421857e1218280e59a64dc707c7e9a6ac290a58c45fcbe05ff38172e037a0994043d979f403d506273c14f86cb895a59c1
-
SSDEEP
384:DIxLqi0RJZtbH9KyM+2pzm+ndwsWCLGrAF+rMRTyN/0L+EcoinblneHQM3epzXjI:cGJ95M+2p6+K9C6rM+rMRa8NuVYt
Malware Config
Extracted
njrat
im523
хороший_чит227
127.0.0.1:5552
345d8bf41e0048532905f37e4f8e9889
-
reg_key
345d8bf41e0048532905f37e4f8e9889
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
c522d9973750b509bea999d0854cd21bfbf854aef3c6e2bfcb041c61f22c42d1.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ