Behavioral task
behavioral1
Sample
53ff636f29886d6039bc4f36a0b37fe19f8b73ec6a4c302bb86ed904a321eecc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
53ff636f29886d6039bc4f36a0b37fe19f8b73ec6a4c302bb86ed904a321eecc.exe
Resource
win10v2004-20221111-en
General
-
Target
53ff636f29886d6039bc4f36a0b37fe19f8b73ec6a4c302bb86ed904a321eecc
-
Size
23KB
-
MD5
dfdc4fe41a5557d2763feb07b67ca7e7
-
SHA1
0e335ee4825d750f5c6ffd087cca09cd9d1816d4
-
SHA256
53ff636f29886d6039bc4f36a0b37fe19f8b73ec6a4c302bb86ed904a321eecc
-
SHA512
67a8c8a832e354fb923068bdfb7007667e5f8a52b5b388c0a546b5f69c448c8e9781acf30bdd93a6cbcacd62dae335d2a2fb01a72bb00a4a2a80ec24a3a1dd1d
-
SSDEEP
384:lMK6b2GZsx/Yr1+liORH1kcPFQ6Lg9gSOYRr9mRvR6JZlbw8hqIusZzZpCv:Gb9glF51LRpcnukI
Malware Config
Extracted
njrat
0.7d
HaCkeD MhmdTiger
127.0.0.1:2500
3ee4f570568bdd10333e0f6e155ab1c8
-
reg_key
3ee4f570568bdd10333e0f6e155ab1c8
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
53ff636f29886d6039bc4f36a0b37fe19f8b73ec6a4c302bb86ed904a321eecc.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ