Behavioral task
behavioral1
Sample
5be4667e55fc53b741099b870abfc584ce7b7fc1f04d419a0d05f6e32a99b1ba.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5be4667e55fc53b741099b870abfc584ce7b7fc1f04d419a0d05f6e32a99b1ba.exe
Resource
win10v2004-20220812-en
General
-
Target
5be4667e55fc53b741099b870abfc584ce7b7fc1f04d419a0d05f6e32a99b1ba
-
Size
23KB
-
MD5
00a6a48c78b53295b0398f05dc2f6600
-
SHA1
4b06e338131848167d8eb4627f82da9a83f6ee4f
-
SHA256
5be4667e55fc53b741099b870abfc584ce7b7fc1f04d419a0d05f6e32a99b1ba
-
SHA512
6b27e0d0723952a42de946afbe5e4d968fcd1c5c6edb7fa6b666db9d4e7a16c09794cd8d58a9594382ff08f4f8b1a1492a59bbcb30083d9192476419d5a68da8
-
SSDEEP
384:rsqS+ER6vRKXGYKRWVSujUtX9w6Dglo61Z5DVmRvR6JZlbw8hqIusZzZr3:Af65K2Yf1jKRpcnuM
Malware Config
Extracted
njrat
0.7d
hake
104.59.98.148 :25565
1506099c170b13a90c45c1eddf313856
-
reg_key
1506099c170b13a90c45c1eddf313856
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
5be4667e55fc53b741099b870abfc584ce7b7fc1f04d419a0d05f6e32a99b1ba.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ