Behavioral task
behavioral1
Sample
82cacc38905e1c9321f6a9719e4f6e9473b57af7f34042b4c2bf919691ac1939.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
82cacc38905e1c9321f6a9719e4f6e9473b57af7f34042b4c2bf919691ac1939.exe
Resource
win10v2004-20221111-en
General
-
Target
82cacc38905e1c9321f6a9719e4f6e9473b57af7f34042b4c2bf919691ac1939
-
Size
23KB
-
MD5
455592f67c983c6ac4947cbb8b851991
-
SHA1
bf78f59cfee056b00e1ccb8ae3b18e735ad30cba
-
SHA256
82cacc38905e1c9321f6a9719e4f6e9473b57af7f34042b4c2bf919691ac1939
-
SHA512
00e4a3959b24474507d0010557bd53a71638fae602d25a580f3959e6f0bd1c700d4d4271c178669efadacb13707510ed44567b1fa40d483395ada41e021a2b34
-
SSDEEP
384:8x8aLWS0dABLYVq6RxP8MDFF09vK563gRMmJKUv0mRvR6JZlbw8hqIusZzZm4:8iXcwt3tRpcnu0
Malware Config
Extracted
njrat
0.7d
HacKed
my0.no-ip.org:100
e313ced07361d88c70b249d220502420
-
reg_key
e313ced07361d88c70b249d220502420
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
82cacc38905e1c9321f6a9719e4f6e9473b57af7f34042b4c2bf919691ac1939.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ