Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20220812-en
General
-
Target
file.exe
-
Size
37KB
-
MD5
7b8cedd62fbcc167ceea779a208064b5
-
SHA1
bd7b0075a0732f0f3288d3e496abbf0d1a94a588
-
SHA256
9426417e160d6f9331fea10b4bce0e8571394e4a91361956a71df6155e88d1cb
-
SHA512
8c63a89dc504d93df442a84f202470f1cc57f87c161fc06bd2d1500866c3e5e207f357f12ffe15fcb5f76c3522703ae2bf6fd311943cfe893eeb44cc5ef9c224
-
SSDEEP
384:8Ye0MIiej3CVLO309QmykrtMR2tY2Nf4v+6InrAF+rMRTyN/0L+EcoinblneHQMM:stdGdkr2RgJ4G62rM+rMRa8NuQct
Malware Config
Extracted
njrat
im523
HacKed
156.146.36.99:1337
0b9cefa9aaf23c81272248db17336da1
-
reg_key
0b9cefa9aaf23c81272248db17336da1
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
file.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ