Behavioral task
behavioral1
Sample
710aee2409e33eafe2d56bdf4c4b8434.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
710aee2409e33eafe2d56bdf4c4b8434.exe
Resource
win10v2004-20220812-en
General
-
Target
710aee2409e33eafe2d56bdf4c4b8434.exe
-
Size
37KB
-
MD5
710aee2409e33eafe2d56bdf4c4b8434
-
SHA1
551588ca3457971121b63c390c4d52cab13c886a
-
SHA256
40078261f88c8a91fd32bcbb89517c14efd1b13c217f44c18184be2813ea74a7
-
SHA512
934b9db17957a539bd8c0356cb89197a6b2b193a9c1b65c42eba8ac3b14b85a02e2298924a8ee4e72e408a12df8359ee02f4547c07d4c4947ac381f5ff40a3b9
-
SSDEEP
384:weELEUiFsbK7FmpE8QyEfQEP/1fPMIArAF+rMRTyN/0L+EcoinblneHQM3epzX6H:NEH2n8LEfQE13MZrM+rMRa8NuYdt
Malware Config
Extracted
njrat
im523
HacKed
2.tcp.ngrok.io:19280
f98a5f41bae6af8595aa1f9015e923a5
-
reg_key
f98a5f41bae6af8595aa1f9015e923a5
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
710aee2409e33eafe2d56bdf4c4b8434.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ