Behavioral task
behavioral1
Sample
e24518cbb7e91b239920a43cae0e1419506e1da420a57d73522c18cec76948a4.exe
Resource
win10-20220812-en
General
-
Target
e24518cbb7e91b239920a43cae0e1419506e1da420a57d73522c18cec76948a4
-
Size
37KB
-
MD5
3ea38ddf6c2627192aeaf980da1218e8
-
SHA1
6dffcd12be2000e36844180621ba063294440761
-
SHA256
e24518cbb7e91b239920a43cae0e1419506e1da420a57d73522c18cec76948a4
-
SHA512
95042901083200042d23d50dada4c655a1136f1b785f5079a25aff37001ecaf2adf07b8e952c8d41bb8580bc470e472780053c1e261588937938963b7ead9167
-
SSDEEP
384:Kv2jKicgojn5xL5oyUi8eTlijnfTcY6AlWrAF+rMRTyN/0L+EcoinblneHQM3epD:i2Kf5DUi8UijnQFAArM+rMRa8NuRq2t
Malware Config
Extracted
njrat
im523
DWMLOL
enderop44-46254.portmap.io:46254
183d5e76fb5c594cfd6fd7e24cb4c085
-
reg_key
183d5e76fb5c594cfd6fd7e24cb4c085
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
e24518cbb7e91b239920a43cae0e1419506e1da420a57d73522c18cec76948a4.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ