Behavioral task
behavioral1
Sample
652c0a54d276d3b8582844171189c9242ee71e20f8040dcf990724508fa15077.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
652c0a54d276d3b8582844171189c9242ee71e20f8040dcf990724508fa15077.exe
Resource
win10v2004-20220812-en
General
-
Target
652c0a54d276d3b8582844171189c9242ee71e20f8040dcf990724508fa15077
-
Size
130KB
-
MD5
6cf87883c44fab14135667d29be27a60
-
SHA1
18b6cb7665ce36c9dc43fc3f7e72879411650d95
-
SHA256
652c0a54d276d3b8582844171189c9242ee71e20f8040dcf990724508fa15077
-
SHA512
8e4fb664d5b4c3cde1c38ca21158dba7620e992fddfb1f0f3a769b65112883640511594d505b8ea2db3f92404c7186bf59dd4d1db677ea27cec29f764c7ec4a7
-
SSDEEP
3072:XYIG0RFac0eq2+e+UfVOI/++XmaAfkYmztzG163:q2f9+0h2XfPmztzG16
Malware Config
Extracted
njrat
0.7d
HacKed
127.0.0.1:80
f28593ab4d0e2dcddc48d27d99c13439
-
reg_key
f28593ab4d0e2dcddc48d27d99c13439
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
652c0a54d276d3b8582844171189c9242ee71e20f8040dcf990724508fa15077.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ