Behavioral task
behavioral1
Sample
e2a3aec25e86d6f8d1392710134607fd77aae869c59c207a21171e77bfed5db4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e2a3aec25e86d6f8d1392710134607fd77aae869c59c207a21171e77bfed5db4.exe
Resource
win10v2004-20220812-en
General
-
Target
e2a3aec25e86d6f8d1392710134607fd77aae869c59c207a21171e77bfed5db4
-
Size
22KB
-
MD5
86e5e85ddf6d0052995b283b25102fd3
-
SHA1
64d8f5680a1528d7e3a0619f63f0012e51ceb43e
-
SHA256
e2a3aec25e86d6f8d1392710134607fd77aae869c59c207a21171e77bfed5db4
-
SHA512
17ea5dce236b3c4586b1966a47550bdbaba900b17d95f58f20bd0be44e1ff8c94978e052c87135c90b0eb1ec4b5670aebd700ac2b6de2d8f19dea0ba5a55bfb9
-
SSDEEP
384:9MK6b2GZsx/Yr1+liORH1kcPFQ6Lg9gSOYRr9mRvR6JZlbw8hqIusZzZ2lTH:eb9glF51LRpcnubl7
Malware Config
Extracted
njrat
0.7d
HacKed
eminem9989.ddns.net:1122
76419a4962ad85f506fbb6fce54fd5b4
-
reg_key
76419a4962ad85f506fbb6fce54fd5b4
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
e2a3aec25e86d6f8d1392710134607fd77aae869c59c207a21171e77bfed5db4.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ