Behavioral task
behavioral1
Sample
8d922558add2ca72d28ccf04735189741860cc38f9f6862a1a430314a814749d.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
8d922558add2ca72d28ccf04735189741860cc38f9f6862a1a430314a814749d.exe
Resource
win10v2004-20220414-en
General
-
Target
8d922558add2ca72d28ccf04735189741860cc38f9f6862a1a430314a814749d
-
Size
93KB
-
MD5
e005b555ea05cef46b13fe5de4892ab9
-
SHA1
547a4b55fd055d5eaa69090da90f8d9bf58cd51c
-
SHA256
8d922558add2ca72d28ccf04735189741860cc38f9f6862a1a430314a814749d
-
SHA512
2731c12ffad3eb09151301d4d1fd3987b48df64ba7b9c55a80fcb8ce75eb0e9960eb1e7b1e010507d45a0f0bfd729fe08c43fbcd0de2345576110a01c291a4b8
-
SSDEEP
1536:nFN5W+AFsmjsw+gRJN4T080M0+5eS3ZtlvNIYAEhIuQBRGbDqbJc/PO06sGtUr:nFN0+Ne+yJSTveWZTvNvNhUB/bJcnO05
Malware Config
Extracted
njrat
im523
jpeg
178.44.199.23:7777
f7637d68ce1b9405a0673e2492622992
-
reg_key
f7637d68ce1b9405a0673e2492622992
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
8d922558add2ca72d28ccf04735189741860cc38f9f6862a1a430314a814749d.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ