Behavioral task
behavioral1
Sample
e8b30fe51545f3a3464e20f020574791c5525ecc1b2e66c96ef96f7fe871a010.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e8b30fe51545f3a3464e20f020574791c5525ecc1b2e66c96ef96f7fe871a010.exe
Resource
win10v2004-20221111-en
General
-
Target
e8b30fe51545f3a3464e20f020574791c5525ecc1b2e66c96ef96f7fe871a010
-
Size
23KB
-
MD5
355db377b53d99e5fc1445e25d4c243e
-
SHA1
880c2496355e289946e02cbe870b7d48f56a9e3a
-
SHA256
e8b30fe51545f3a3464e20f020574791c5525ecc1b2e66c96ef96f7fe871a010
-
SHA512
6a72db71d190754d7e1bd36ffc54ebb3b92e2134256368d180e32508e947636b1ef641b5eda02dad9183e4d93e2bd21cec3df6aa4707b7c498f367ddfa626659
-
SSDEEP
384:2MK6b2GZsx/Yr1+liORH1kcPFQ6Lg9gSOYRr9mRvR6JZlbw8hqIusZzZiqP:hb9glF51LRpcnuN8
Malware Config
Extracted
njrat
0.7d
MRAKHAF
isuero.no-ip.info:1990
eded8ce0cce4bae66af70ac7c7464702
-
reg_key
eded8ce0cce4bae66af70ac7c7464702
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
e8b30fe51545f3a3464e20f020574791c5525ecc1b2e66c96ef96f7fe871a010.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ