Behavioral task
behavioral1
Sample
083cf2b8153b97fe12cff304215ec8ac.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
083cf2b8153b97fe12cff304215ec8ac.exe
Resource
win10v2004-20220812-en
General
-
Target
083cf2b8153b97fe12cff304215ec8ac.exe
-
Size
37KB
-
MD5
083cf2b8153b97fe12cff304215ec8ac
-
SHA1
5dc5d20ef9b4b13debbf0db1a4930f14990afa4a
-
SHA256
eb0c3c93ac49a1c20a42fa82c5f1f81c1df01d05a0670342ea974b7d79308856
-
SHA512
7bf10e9be2ada50a96cf5d2bd5d907f4521b177913e8759d96c16443c31e69cc752d9fb5e1b265048c311ef9a9e8b810b89ff92710a6a5af4710a40607cfa450
-
SSDEEP
384:mu+vEiTbZvpWNcZ0y8f1CRDX5CLk6SgprAF+rMRTyN/0L+EcoinblneHQM3epzXI:T+dTZ38f1CRDcNSIrM+rMRa8Nu1Et
Malware Config
Extracted
njrat
im523
HacKed
lynnnaz.ddns.net:1703
258c2f365319c9fd509866032c7dc587
-
reg_key
258c2f365319c9fd509866032c7dc587
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
083cf2b8153b97fe12cff304215ec8ac.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ