Behavioral task
behavioral1
Sample
56a93141da5e548bbb1b51d75c1c6eb4.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
56a93141da5e548bbb1b51d75c1c6eb4.exe
Resource
win10v2004-20220721-en
General
-
Target
56a93141da5e548bbb1b51d75c1c6eb4.exe
-
Size
37KB
-
MD5
56a93141da5e548bbb1b51d75c1c6eb4
-
SHA1
220b3777cd9a82fb7ec3df41fe5671afbbff48e5
-
SHA256
e9bf3fc00ed911d03f986e4ee8bc199835d75b2772c4089351a3e81f6a723558
-
SHA512
48829aed487046290e28ab2e1e6db0f2084721e7fbf4766d148f17531dcca5fbc0e63cfdfbd9d9574a7c551320eb488e130be2f2776138abde7901bed5227abd
-
SSDEEP
384:wzuBvP7LsikV9zNf/1uyU75qHhSs++XtrAF+rMRTyN/0L+EcoinblneHQM3epzX6:PvjEl1lU75qIN+drM+rMRa8Nu7ot
Malware Config
Extracted
njrat
im523
HacKed
6.tcp.eu.ngrok.io:12180
27a24c123d1e61d690116d6e2ecb6791
-
reg_key
27a24c123d1e61d690116d6e2ecb6791
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
56a93141da5e548bbb1b51d75c1c6eb4.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ