Behavioral task
behavioral1
Sample
ad53faff462d7da469c5c70b622482d9c59d2b5d14299f10e49b625a8dcaeba7.exe
Resource
win7-20220414-en
General
-
Target
ad53faff462d7da469c5c70b622482d9c59d2b5d14299f10e49b625a8dcaeba7
-
Size
23KB
-
MD5
8cece45770d4bef48d2d9d40d952b8b1
-
SHA1
05e4490195ea8d342809cf96b439ce54d927b3bb
-
SHA256
ad53faff462d7da469c5c70b622482d9c59d2b5d14299f10e49b625a8dcaeba7
-
SHA512
f73f091f0c3306fa12f0c5bf3f988741d38b8d9e7123d9fb8d75306321b740e2078b9666bc0158193f8cfed231d229c35c54aa913f030f63b4aef8cf2fd1a4ce
-
SSDEEP
384:fV8aZYC9twBNdcvFaly2H0dbJo6HghcASEJqc/ZmRvR6JZlbw8hqIusZzZQ0:fdY+sNKqNHnSdRpcnuO
Malware Config
Extracted
njrat
0.7d
HacKed
rattedlmao.ddns.net:5555
9dc16129f7613d89723d715b6ad058d3
-
reg_key
9dc16129f7613d89723d715b6ad058d3
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
ad53faff462d7da469c5c70b622482d9c59d2b5d14299f10e49b625a8dcaeba7.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ