Behavioral task
behavioral1
Sample
0095782ed10cdb7c4a28abb64d33a8198dd140a4f2d009f257b23082b18a31ad.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
0095782ed10cdb7c4a28abb64d33a8198dd140a4f2d009f257b23082b18a31ad.exe
Resource
win10v2004-20220414-en
General
-
Target
0095782ed10cdb7c4a28abb64d33a8198dd140a4f2d009f257b23082b18a31ad
-
Size
37KB
-
MD5
0fb6a481f0817c83932e5412c287cfb5
-
SHA1
e46b34896ea4daf2121ccbf95312e08b47b94cbf
-
SHA256
0095782ed10cdb7c4a28abb64d33a8198dd140a4f2d009f257b23082b18a31ad
-
SHA512
ceb7517680c3a6d516089350e0ccdba34ece483ad2cd2c61c6e2116d021b4114caff477794740dfac61ec09f48af85ddfb90e0a217ad7d67b6402c83513004fa
-
SSDEEP
384:Me6kit2Zf5W9cTYXyc/t7MGwzHFmnPuhurAF+rMRTyN/0L+EcoinblneHQM3epzz:tNjjTYic/tk8PuYrM+rMRa8NuQJgt
Malware Config
Extracted
njrat
im523
HacKed
jgjg.hopto.org:13156
d26855c7f566e12603501ded24020d36
-
reg_key
d26855c7f566e12603501ded24020d36
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
0095782ed10cdb7c4a28abb64d33a8198dd140a4f2d009f257b23082b18a31ad.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ