Behavioral task
behavioral1
Sample
5a26c0bb51f200519b770e82caabb7be2927bd986284a5a8e036ac5979447c60.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5a26c0bb51f200519b770e82caabb7be2927bd986284a5a8e036ac5979447c60.exe
Resource
win10v2004-20220812-en
General
-
Target
5a26c0bb51f200519b770e82caabb7be2927bd986284a5a8e036ac5979447c60
-
Size
23KB
-
MD5
a166ce9188d4ef0c3e29b90ccf360d80
-
SHA1
b718d0361e0034c7458c90bb604e9ac870c164bf
-
SHA256
5a26c0bb51f200519b770e82caabb7be2927bd986284a5a8e036ac5979447c60
-
SHA512
fae760239c31a237709f4f6f91d79588573db935c7cdad388a970d674b9845fbc5f536358fe595b497b0a3d5ea6754e7ba495a45c20b262cab6ef8fd720454e1
-
SSDEEP
384:wsqS+ER6vRKXGYKRWVSujUtX9w6Dglo61Z5DVmRvR6JZlbw8hqIusZzZdU:Hf65K2Yf1jKRpcnuF
Malware Config
Extracted
njrat
0.7d
HacKed
mr-ybyb.no-ip.biz:5552
9bb46df01983f82689c6148a32d70933
-
reg_key
9bb46df01983f82689c6148a32d70933
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
5a26c0bb51f200519b770e82caabb7be2927bd986284a5a8e036ac5979447c60.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ