Behavioral task
behavioral1
Sample
589a9ee4991d935971bf6f5bad94a527f3b7eeb3e6f3fe469446a7e21246950f.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
589a9ee4991d935971bf6f5bad94a527f3b7eeb3e6f3fe469446a7e21246950f.exe
Resource
win10v2004-20220414-en
General
-
Target
589a9ee4991d935971bf6f5bad94a527f3b7eeb3e6f3fe469446a7e21246950f
-
Size
37KB
-
MD5
6d9ad1b00cd165a29db6015612b4c737
-
SHA1
7b68c3e9cdf360845720b7216d508a88c6325447
-
SHA256
589a9ee4991d935971bf6f5bad94a527f3b7eeb3e6f3fe469446a7e21246950f
-
SHA512
30ecbb2e9973886c2b700ee362e19aba31e5c7b0288a4425d6b3134c8f36892658ede89cedb53b52e4dd334946a18639eab5e082eefd1ff002c92b956da89bd6
-
SSDEEP
384:gR8CT0i9ddTe/kCOyU7d+P7WDv8PorAF+rMRTyN/0L+EcoinblneHQM3epzXt6Nc:ahD1CFU7d+qb8QrM+rMRa8Nun6yt
Malware Config
Extracted
njrat
im523
HacKed
5.1.49.49:25565
1c2835cd073b6f871295750eb3281f85
-
reg_key
1c2835cd073b6f871295750eb3281f85
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
589a9ee4991d935971bf6f5bad94a527f3b7eeb3e6f3fe469446a7e21246950f.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ