Behavioral task
behavioral1
Sample
56edb651c8e941045cf52cd77f155bbc0d9279f1ccf18b6058b24bfc94f1c043.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
56edb651c8e941045cf52cd77f155bbc0d9279f1ccf18b6058b24bfc94f1c043.exe
Resource
win10v2004-20221111-en
General
-
Target
56edb651c8e941045cf52cd77f155bbc0d9279f1ccf18b6058b24bfc94f1c043
-
Size
23KB
-
MD5
83685ff7162494045c0e92e94bb1fa68
-
SHA1
883dbdfb11da0d9cbfab83d5bb8fde6a7eb2edfa
-
SHA256
56edb651c8e941045cf52cd77f155bbc0d9279f1ccf18b6058b24bfc94f1c043
-
SHA512
64c937f1e8b9a74fa956b8657085cdc9a85652c8720dbfc52a3e4fc80d05bc4e98431f9f692cdd5937cb5e22a9c3acb31d65c95b76fe7aa3c349db79a2a90483
-
SSDEEP
384:KsqS+ER6vRKXGYKRWVSujUtX9w6Dglo61Z5DVmRvR6JZlbw8hqIusZzZO1:lf65K2Yf1jKRpcnuB
Malware Config
Extracted
njrat
0.7d
HacKed
192.168.1.101:5552
b663aabc5fc0552cf1dbbba828aa1880
-
reg_key
b663aabc5fc0552cf1dbbba828aa1880
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
56edb651c8e941045cf52cd77f155bbc0d9279f1ccf18b6058b24bfc94f1c043.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ