Behavioral task
behavioral1
Sample
c057b20168f138304c491aad769453c92851c3b119662715c49b8ae66881d3d7.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
c057b20168f138304c491aad769453c92851c3b119662715c49b8ae66881d3d7.exe
Resource
win10v2004-20220414-en
General
-
Target
c057b20168f138304c491aad769453c92851c3b119662715c49b8ae66881d3d7
-
Size
37KB
-
MD5
c3f164e066b7f20fffd8df364fc40266
-
SHA1
85133f66865acaf84901e93a18477277497ee725
-
SHA256
c057b20168f138304c491aad769453c92851c3b119662715c49b8ae66881d3d7
-
SHA512
1cc683df9225a6588011f28942762030f0d94ba36fe4226447e7e0f46c5dc15231d274000695df35cdba4094612a1adb07c688cdd67aadc7070299af45f73a29
-
SSDEEP
384:EuBeoixJhl7OHg1WykrppPl48ui3PArAF+rMRTyN/0L+EcoinblneHQM3epzXlEN:9B+R1NkrppqFifArM+rMRa8NuIHt
Malware Config
Extracted
njrat
im523
HacKed
manakailia.hopto.org:1805
b3606c5f97d6501fbc87e008a24eb48c
-
reg_key
b3606c5f97d6501fbc87e008a24eb48c
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
c057b20168f138304c491aad769453c92851c3b119662715c49b8ae66881d3d7.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ