Behavioral task
behavioral1
Sample
5d77954b4c3d9502276ef66cde1a3e173cb80de4d67752bbb68053c901b471eb.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
5d77954b4c3d9502276ef66cde1a3e173cb80de4d67752bbb68053c901b471eb.exe
Resource
win10v2004-20220721-en
General
-
Target
5d77954b4c3d9502276ef66cde1a3e173cb80de4d67752bbb68053c901b471eb
-
Size
23KB
-
MD5
2387a59ea2fd012660f4309403719829
-
SHA1
ba40a222616da48b91b65250e257ca3cd58ac7b3
-
SHA256
5d77954b4c3d9502276ef66cde1a3e173cb80de4d67752bbb68053c901b471eb
-
SHA512
caa43c0934955c06d0774cdfcb84badaaa5991063760c580d36383999d93873e07197a9b4cad8986136d18b3ea8c4f8afcb341bc3a6116a85ef6adc7d92dbe74
-
SSDEEP
384:lIGwz6+T4IjWZFNwXU0eiNUBdvt6lgT+lLOhXxQmRvR6JZlbw8hqIusZzZAO:lwTbC81NgRpcnuE
Malware Config
Extracted
njrat
0.7d
HacKed
127.0.0.1:1177
a47829835e21230213cd017c2b4b3e4f
-
reg_key
a47829835e21230213cd017c2b4b3e4f
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
5d77954b4c3d9502276ef66cde1a3e173cb80de4d67752bbb68053c901b471eb.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ