Behavioral task
behavioral1
Sample
0ca9fee2e1444913a937454e8ea5f0539e446246a9097a42dee4279b1bae2c07.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
0ca9fee2e1444913a937454e8ea5f0539e446246a9097a42dee4279b1bae2c07.exe
Resource
win10v2004-20220414-en
General
-
Target
0ca9fee2e1444913a937454e8ea5f0539e446246a9097a42dee4279b1bae2c07
-
Size
37KB
-
MD5
40154b9ad674d822f91993a2cf4e392e
-
SHA1
e92be4fe50e5d9656570a7c47cbf9449df52d6b9
-
SHA256
0ca9fee2e1444913a937454e8ea5f0539e446246a9097a42dee4279b1bae2c07
-
SHA512
057da7897bd97985f37ed489de774ae1c71bf3bd802b72b6de9d723eaec2247fbb70964a4688ffa4c257f2cbe30c1e946a49e5422621a5272c3057b5fc901219
-
SSDEEP
384:6AtKUiDtblmJEpRGyEf7JfJuQCY6id1rAF+rMRTyN/0L+EcoinblneHQM3epzX3:ptiHpR9Ef7JsQCFi/rM+rMRa8NuFAt
Malware Config
Extracted
njrat
im523
System
adeldu122.ddns.net:1994
e41e2124d09bef2023f565531799062f
-
reg_key
e41e2124d09bef2023f565531799062f
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
0ca9fee2e1444913a937454e8ea5f0539e446246a9097a42dee4279b1bae2c07.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ