Behavioral task
behavioral1
Sample
e5de97381e789c232effc0b8d7e83b0916cdda7963a558b59b7b6da843d5b857.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e5de97381e789c232effc0b8d7e83b0916cdda7963a558b59b7b6da843d5b857.exe
Resource
win10v2004-20220901-en
General
-
Target
e5de97381e789c232effc0b8d7e83b0916cdda7963a558b59b7b6da843d5b857
-
Size
22KB
-
MD5
d6ad89029afc463165fe60048c0c5eff
-
SHA1
9eba1abc68756dffdbc4d2e282ddad93d2a75d5b
-
SHA256
e5de97381e789c232effc0b8d7e83b0916cdda7963a558b59b7b6da843d5b857
-
SHA512
5354e0efbed31645a312028898fc1fa814dfeff91a155b36924fa3735230af460b2558bd380727d302136d3a7a28af30ebd572adc29fcf327a55117ad36716f1
-
SSDEEP
384:VY324bcgPiJLQrfARGSRUJsbY6ZgvSMBD3t8mRvR6JZlbw8hqIusZzZO0:qL2s+tRyRpcnuU
Malware Config
Extracted
njrat
0.7d
HacKed
hbeebxooox.ddns.net:1177
c483f2c06cec80dc7fbdca44b3c4a986
-
reg_key
c483f2c06cec80dc7fbdca44b3c4a986
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
e5de97381e789c232effc0b8d7e83b0916cdda7963a558b59b7b6da843d5b857.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ