Behavioral task
behavioral1
Sample
ba8fb405b5254226e36191b3f7fdb2c930b9e6df87191dc35b4d676d821557fd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ba8fb405b5254226e36191b3f7fdb2c930b9e6df87191dc35b4d676d821557fd.exe
Resource
win10v2004-20220812-en
General
-
Target
ba8fb405b5254226e36191b3f7fdb2c930b9e6df87191dc35b4d676d821557fd
-
Size
23KB
-
MD5
546b58aa3d1fc191259d65a18296971b
-
SHA1
b49688486241e647ab62aac273f6f3330044cd96
-
SHA256
ba8fb405b5254226e36191b3f7fdb2c930b9e6df87191dc35b4d676d821557fd
-
SHA512
1c791048ab942fee46f579ccba6bbb7e1493b18533450bcd318db02a9600e9a206ccfd5e2b919700dcfdbe37bcbd4780981f83ae2a2d149477e3d2e2ad0ac2bc
-
SSDEEP
384:Cz+n2650N3qZbATcjRGC5Eo9D46BgnqUhay1ZmRvR6JZlbw8hqIusZzZ+1:CMm+71d5XRpcnuN
Malware Config
Extracted
njrat
0.7d
HacKed
tophack.no-ip.biz:1177
75aed128d42d6b5d03c83ccdb9838a9a
-
reg_key
75aed128d42d6b5d03c83ccdb9838a9a
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
ba8fb405b5254226e36191b3f7fdb2c930b9e6df87191dc35b4d676d821557fd.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ