Behavioral task
behavioral1
Sample
345838fa898550dcdb8681b60f717d500f712c91e3516761a284b253e395b9a4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
345838fa898550dcdb8681b60f717d500f712c91e3516761a284b253e395b9a4.exe
Resource
win10v2004-20220901-en
General
-
Target
345838fa898550dcdb8681b60f717d500f712c91e3516761a284b253e395b9a4
-
Size
37KB
-
MD5
be394d58d8d319597591b58f014fd2fa
-
SHA1
c6af0fce11af0f3f1a74ced9c5ada724f15a76e0
-
SHA256
345838fa898550dcdb8681b60f717d500f712c91e3516761a284b253e395b9a4
-
SHA512
99927523cf565ce3ec9390eab047e3cffba697ae9d8134cc1ab80712f894fff81e373eeef242f9a0d4c28f336feb05d64debe5f18d66604cdb5a4d70d20947b2
-
SSDEEP
384:mAevEiTblvpWNcZ0y8fJCtTHVGLkC+xlrAF+rMRTyN/0L+EcoinblneHQM3epzXl:leBTZ38fJCtT0d+LrM+rMRa8Nu4kjt
Malware Config
Extracted
njrat
im523
HacKed
themixa22.ddns.net:5552
8822de92cb4cb8404316571a8890f923
-
reg_key
8822de92cb4cb8404316571a8890f923
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
345838fa898550dcdb8681b60f717d500f712c91e3516761a284b253e395b9a4.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ