Behavioral task
behavioral1
Sample
72884F7CB1D12B748DC2E2F03799A6E525334E44164A5.exe
Resource
win7-20220812-en
General
-
Target
72884F7CB1D12B748DC2E2F03799A6E525334E44164A5.exe
-
Size
37KB
-
MD5
ce47317757da1c27a0d6bbd137482436
-
SHA1
c452843e2c8935f9780e95abf4a8f6379fde58b3
-
SHA256
72884f7cb1d12b748dc2e2f03799a6e525334e44164a5e80de47cb5fedb8e0ae
-
SHA512
a92d98c076d2a39463c893b2f1a2be7f1f83b74975ef66016f9b6a2f36528073b333817491675d2ae3620cc7d7581e850e90897056237a81188d2ef7260cfa9d
-
SSDEEP
384:+Q6qjKicggjn5xL5oyUi8eL16jnP7UYKoN3rAF+rMRTyN/0L+EcoinblneHQM3eW:+Bqif5DUi886jnQlo1rM+rMRa8NuUHt
Malware Config
Extracted
njrat
im523
HacKed
0.tcp.eu.ngrok.io:18521
c1c4d01d5f5752c380d95bb9355db0dc
-
reg_key
c1c4d01d5f5752c380d95bb9355db0dc
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
72884F7CB1D12B748DC2E2F03799A6E525334E44164A5.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ