Behavioral task
behavioral1
Sample
e2487be2daa5eff6bbbda1617e497869115ede137b85af3f421dadd22871ac19.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e2487be2daa5eff6bbbda1617e497869115ede137b85af3f421dadd22871ac19.exe
Resource
win10v2004-20220812-en
General
-
Target
e2487be2daa5eff6bbbda1617e497869115ede137b85af3f421dadd22871ac19
-
Size
23KB
-
MD5
dcca8aacc0e25213c79de81c1020ab92
-
SHA1
ab9722a8662e301befdb7749746ae5a13823e926
-
SHA256
e2487be2daa5eff6bbbda1617e497869115ede137b85af3f421dadd22871ac19
-
SHA512
31f0a5d4318d30edfed9b91e59cd70b7ec84a241d22746c41726348ffbce525ac2b1b21029f3f5d5860b871793f0adfdfead49d45040626e22bf0fec70baadb6
-
SSDEEP
384:KMqYmCsg/yJrQ7hucGSl7UJp4g6JgfCcosjddmRvR6JZlbw8hqIusZzZqJ:KErG0Btl7DRpcnu9
Malware Config
Extracted
njrat
0.7d
HacKed
127.0.0.1:3535
0500056740c0dc710fb5911701e67e6d
-
reg_key
0500056740c0dc710fb5911701e67e6d
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
e2487be2daa5eff6bbbda1617e497869115ede137b85af3f421dadd22871ac19.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ