Behavioral task
behavioral1
Sample
33ee021d665872c5f5c5a4f67c0bb1a705b390d5b5d39fb199b081c5a57f04a7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
33ee021d665872c5f5c5a4f67c0bb1a705b390d5b5d39fb199b081c5a57f04a7.exe
Resource
win10v2004-20220901-en
General
-
Target
33ee021d665872c5f5c5a4f67c0bb1a705b390d5b5d39fb199b081c5a57f04a7
-
Size
23KB
-
MD5
939f533cc7f6437f9fb86fd05b8d6ee0
-
SHA1
9f524d774bc4610a31278423d9f032107b6679a2
-
SHA256
33ee021d665872c5f5c5a4f67c0bb1a705b390d5b5d39fb199b081c5a57f04a7
-
SHA512
c48788b36da0d78e39ea82c67d14562e570a31319941f94c240158b2ad22aafa19a07a05131d8e12c6cb49d17bcca78e15783d8ce9d3f9a96f58d856d192cdca
-
SSDEEP
384:tjoWSkWHa55BgDVRGipkItzY6vZg36Eh7FpmRvR6JZlbw8hqIusZzZhq:tcJuk9pHRpcnu3
Malware Config
Extracted
njrat
0.7d
HacKed
kakashisenpai.no-ip.biz:5552
329e9740d97e12591895bf0c9b56b59a
-
reg_key
329e9740d97e12591895bf0c9b56b59a
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
33ee021d665872c5f5c5a4f67c0bb1a705b390d5b5d39fb199b081c5a57f04a7.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ