Behavioral task
behavioral1
Sample
8c0abddba9f6a5a4abcea95fc37c35174d38b2922c8270f6af78ca491083a682.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8c0abddba9f6a5a4abcea95fc37c35174d38b2922c8270f6af78ca491083a682.exe
Resource
win10v2004-20220812-en
General
-
Target
8c0abddba9f6a5a4abcea95fc37c35174d38b2922c8270f6af78ca491083a682
-
Size
23KB
-
MD5
8348d6ced2a460377a679f511023f7b0
-
SHA1
5ced000171d35656b038f13232a407e161b337df
-
SHA256
8c0abddba9f6a5a4abcea95fc37c35174d38b2922c8270f6af78ca491083a682
-
SHA512
81fe141c866320a6aa3e4cafdf12c405f7da44498cb58ec723ef236dbebb7a8d65106635dcbc4918e820336273e862204b02ce6e239a9599391ae8f5d713b45c
-
SSDEEP
384:W+n2650N3qZbATcjRGC5Eo9D46BgnqUhay1ZmRvR6JZlbw8hqIusZzZhf:Jm+71d5XRpcnue
Malware Config
Extracted
njrat
0.7d
HacKed
weqwwq111.ddns.net:1177
a9751a5fb3351ce0a3b12e405c80fd32
-
reg_key
a9751a5fb3351ce0a3b12e405c80fd32
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
8c0abddba9f6a5a4abcea95fc37c35174d38b2922c8270f6af78ca491083a682.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ