Behavioral task
behavioral1
Sample
c24ea2a4f56ca0eab1080f9979a3e8c57a0c8d4b7872e4eda5bb1e4f147ee7a1.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
c24ea2a4f56ca0eab1080f9979a3e8c57a0c8d4b7872e4eda5bb1e4f147ee7a1.exe
Resource
win10v2004-20220414-en
General
-
Target
c24ea2a4f56ca0eab1080f9979a3e8c57a0c8d4b7872e4eda5bb1e4f147ee7a1
-
Size
23KB
-
MD5
017d58616ffe5e91e84cd5a10dc6cf5a
-
SHA1
076df91663f13ad61457060661db5937d451a60c
-
SHA256
c24ea2a4f56ca0eab1080f9979a3e8c57a0c8d4b7872e4eda5bb1e4f147ee7a1
-
SHA512
5ae5ad9459a6a43849297569024b56dd7bb8ce4cafec1e35ed9fe70e9825cb4fc2e86bae624560039286fbb76aa7b2d2c50d0bf34a2239568d0fc4a77db47979
-
SSDEEP
384:oweXCQIreJig/8Z7SS1fEBpng6tgL2IBPZZmRvR6JZlbw8hqIusZzZRW3:vLq4116Rpcnuk4
Malware Config
Extracted
njrat
0.7d
HacKed
bmhha.ddns.net:1604
81070cdd786421ae0d07b0841d9f8467
-
reg_key
81070cdd786421ae0d07b0841d9f8467
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
c24ea2a4f56ca0eab1080f9979a3e8c57a0c8d4b7872e4eda5bb1e4f147ee7a1.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ