Behavioral task
behavioral1
Sample
54c93159d7b47412709f718922e91432.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
54c93159d7b47412709f718922e91432.exe
Resource
win10v2004-20220812-en
General
-
Target
54c93159d7b47412709f718922e91432.exe
-
Size
37KB
-
MD5
54c93159d7b47412709f718922e91432
-
SHA1
d2ebc8c42b19a0cbf2b20c53f56c8f2f45b0a71e
-
SHA256
c1fe26268e8b3ac8dedd883e6623ac98ce3848f347f17a89d14c3558c8a01a2c
-
SHA512
e734778261807e9ec3cc0e19e376409c0fdc2ddd36c572e780a989d2fad1066898caf33bb238a1b0f0b457011fcc882b349ef91eb009d0cae158cf2448806e00
-
SSDEEP
384:eq9dMiLtBndznNCyMGm5savhd/cGmTbsrAF+rMRTyN/0L+EcoinblneHQM3epzXj:tzRNRMGm5tr/1mXsrM+rMRa8Nu11t
Malware Config
Extracted
njrat
im523
Тест
0.tcp.eu.ngrok.io:17981
aaec5be39b5c7b0e801d949d7f6e785e
-
reg_key
aaec5be39b5c7b0e801d949d7f6e785e
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
54c93159d7b47412709f718922e91432.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ