Behavioral task
behavioral1
Sample
32b2120f490ba492d2cfa4673afcbbb2c1dd9b40a6605d6016f19d81faf661db.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
32b2120f490ba492d2cfa4673afcbbb2c1dd9b40a6605d6016f19d81faf661db.exe
Resource
win10v2004-20220414-en
General
-
Target
32b2120f490ba492d2cfa4673afcbbb2c1dd9b40a6605d6016f19d81faf661db
-
Size
37KB
-
MD5
3614afdba86240954c0ac3323adc8ac3
-
SHA1
a595292f0c62494f04a94833a381c865edaaac3d
-
SHA256
32b2120f490ba492d2cfa4673afcbbb2c1dd9b40a6605d6016f19d81faf661db
-
SHA512
6ff1783e5e3258226cbf40179a946b869a5ce20f6e6def383732f901960aae031764e02cf961693712ff4141d49532373663df97bcf689c362b72ca5e08bf19c
-
SSDEEP
384:SiOIiu/jtD+P3V+y0bFwRktv7ms2cfPrAF+rMRTyN/0L+EcoinblneHQM3epzXP/:HXmV10bFwRktalcHrM+rMRa8NuVlt
Malware Config
Extracted
njrat
im523
HacKed
nikita22811.ddns.net:4142
6283acb16a134e6273566166330121e9
-
reg_key
6283acb16a134e6273566166330121e9
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
32b2120f490ba492d2cfa4673afcbbb2c1dd9b40a6605d6016f19d81faf661db.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ