Behavioral task
behavioral1
Sample
5207c90533759690decf146053496e4a652cac1e232e777d20988c9b378bb692.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
5207c90533759690decf146053496e4a652cac1e232e777d20988c9b378bb692.exe
Resource
win10v2004-20220414-en
General
-
Target
5207c90533759690decf146053496e4a652cac1e232e777d20988c9b378bb692
-
Size
23KB
-
MD5
0e634348ed64f9f053d9271926975f99
-
SHA1
162c7587da2f4f04ec68dfada490c23df9efff64
-
SHA256
5207c90533759690decf146053496e4a652cac1e232e777d20988c9b378bb692
-
SHA512
50ab9bd7e16f5997dca00210bc4043a6587c34d73539a8ccb7d5ad9eb06f727557e32190904c7be16c4cb1a34feff176a169ea549895dd9da8e8c50c03e03a7e
-
SSDEEP
384:6QeCo2zmZbQHkJeCdUwBvQ61gjuQBnB9mRvR6JZlbw8hqIusZzZLZUL:l5yBVd7RpcnukUL
Malware Config
Extracted
njrat
0.7d
HacKed
ttufuck.ddns.net:5552
4a026f3b3fefea60c2d615d18f3e8f79
-
reg_key
4a026f3b3fefea60c2d615d18f3e8f79
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
5207c90533759690decf146053496e4a652cac1e232e777d20988c9b378bb692.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ