Behavioral task
behavioral1
Sample
Hack Gold PooL.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Hack Gold PooL.exe
Resource
win10v2004-20221111-en
General
-
Target
e478a87680127357816338b20cba2229b88bc687b9f2da1f2cea5146cae4e40e
-
Size
12KB
-
MD5
9cd38d9ef1eb599452c65515a328f003
-
SHA1
59357cbe4a77ffa8174a0fe3577b3b0b29736f92
-
SHA256
e478a87680127357816338b20cba2229b88bc687b9f2da1f2cea5146cae4e40e
-
SHA512
c44f34d10d4cb9d09ead83ad307557287c5f7a4eb44112e14b33cfec071a49e64636202fa654984890faaef38cb78695bd58389e9f2a296d526cc79f216bbc76
-
SSDEEP
384:xPTE4DvvDXYw8I1hsLrdM/XQnPokStfvVIaoq:xLEKLX8I1hsLrdM/QngkSt3F
Malware Config
Extracted
njrat
0.6.4
HaCKeD by BaRHaM-anon
baxom-anonm.zapto.org:1177
cc6885fb771802b45c9dcc628f9ad989
-
reg_key
cc6885fb771802b45c9dcc628f9ad989
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
e478a87680127357816338b20cba2229b88bc687b9f2da1f2cea5146cae4e40e.rar
-
Hack Gold PooL.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ