Behavioral task
behavioral1
Sample
a7fe5d207dbb5d8e16c1ca00f587b6bf9dbe7753104beb94d6b8637d604e55e9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a7fe5d207dbb5d8e16c1ca00f587b6bf9dbe7753104beb94d6b8637d604e55e9.exe
Resource
win10v2004-20221111-en
General
-
Target
a7fe5d207dbb5d8e16c1ca00f587b6bf9dbe7753104beb94d6b8637d604e55e9
-
Size
23KB
-
MD5
cfac2d58bb2426f6350a25c846516c61
-
SHA1
e95fb2e7c6f7c51288dd40f7a79c6d0281ab0ef9
-
SHA256
a7fe5d207dbb5d8e16c1ca00f587b6bf9dbe7753104beb94d6b8637d604e55e9
-
SHA512
942dc4fe7238f08eeb3063c2749d36e407b1c46d12c852595317021b6fd696f35648ab7a3102eb0d693bab4f218eaa19bd4683eb2847c185da7038c77a4cd574
-
SSDEEP
384:n4Q+SAN7uprgvM5OSUswZXg69gbm4hfpFmRvR6JZlbw8hqIusZzZQS:fOaxVULRpcnuw
Malware Config
Extracted
njrat
0.7d
HacKed
www-eset.sytes.net:1980
3e8c8d1a31d3eb63effca35ac876d566
-
reg_key
3e8c8d1a31d3eb63effca35ac876d566
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
a7fe5d207dbb5d8e16c1ca00f587b6bf9dbe7753104beb94d6b8637d604e55e9.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ