Behavioral task
behavioral1
Sample
837162fef43c45c0b2f42745fb5b5247e6889ac6316d2cc44bb4cb66057cc0e7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
837162fef43c45c0b2f42745fb5b5247e6889ac6316d2cc44bb4cb66057cc0e7.exe
Resource
win10v2004-20220812-en
General
-
Target
837162fef43c45c0b2f42745fb5b5247e6889ac6316d2cc44bb4cb66057cc0e7
-
Size
23KB
-
MD5
02f35ae0948c9a7d7ccf8a47d2724380
-
SHA1
57b353fb088bde8b13f7906fd449452ed995b278
-
SHA256
837162fef43c45c0b2f42745fb5b5247e6889ac6316d2cc44bb4cb66057cc0e7
-
SHA512
595d481a86eb573847bb66637bf9f8c97bd5c9cc8ecc9d0baa55ad056f1e8dc33ec9c64f1f1af911778aa099a915b70155ea46bced23ecf60d976201498bbcef
-
SSDEEP
384:fGwz6+T4IjWZFNwXU0eiNUBdvt6lgT+lLOhXxQmRvR6JZlbw8hqIusZzZh/:NTbC81NgRpcnuG
Malware Config
Extracted
njrat
0.7d
HacKed
188.161.5.52:5552
26ab87da16e51375ec3a3ba0b9c62c3a
-
reg_key
26ab87da16e51375ec3a3ba0b9c62c3a
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
837162fef43c45c0b2f42745fb5b5247e6889ac6316d2cc44bb4cb66057cc0e7.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ