Behavioral task
behavioral1
Sample
eac07d10a5cc52c26b72bb43f2ffa30e6e8da7c2bb18c0786d756755ec99e832.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
eac07d10a5cc52c26b72bb43f2ffa30e6e8da7c2bb18c0786d756755ec99e832.exe
Resource
win10v2004-20221111-en
General
-
Target
eac07d10a5cc52c26b72bb43f2ffa30e6e8da7c2bb18c0786d756755ec99e832
-
Size
23KB
-
MD5
40da64368563ddb6a2d174f1cd930f5d
-
SHA1
462bac616cfc4dee90ab5f858dc40d3494b7d47c
-
SHA256
eac07d10a5cc52c26b72bb43f2ffa30e6e8da7c2bb18c0786d756755ec99e832
-
SHA512
c3a5708dbba96c802bcc9c0bf2883fd085ff2a501f256d0d92bb1ad21e8bbd7346ce0f39d5881cfea0993d167e0b409d32fb938ae2c7e1a76457145610de9f5d
-
SSDEEP
384:bc68yCasVKDh3OQyNpsQ1im/VjJs+PyR46vg5J++p57nhmRvR6JZlbw8hqIusZzt:3873Kt+QesGN/VjZPQRpcnuXw
Malware Config
Extracted
njrat
0.7d
hatmasternew
supportoffice.likescandy.com:999
1518d0a1e324ae197862276cf2e792ff
-
reg_key
1518d0a1e324ae197862276cf2e792ff
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
eac07d10a5cc52c26b72bb43f2ffa30e6e8da7c2bb18c0786d756755ec99e832.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ