Behavioral task
behavioral1
Sample
46794c2854aa5c8c14a0f3801c9f0c9dc49787c57d4ccccf5e7dd07ccfd57d24.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
46794c2854aa5c8c14a0f3801c9f0c9dc49787c57d4ccccf5e7dd07ccfd57d24.exe
Resource
win10v2004-20220812-en
General
-
Target
46794c2854aa5c8c14a0f3801c9f0c9dc49787c57d4ccccf5e7dd07ccfd57d24
-
Size
23KB
-
MD5
c919349ce900172c118180faf88ced31
-
SHA1
6b7c220c3ac39af6c9b6335a7ea0308994630839
-
SHA256
46794c2854aa5c8c14a0f3801c9f0c9dc49787c57d4ccccf5e7dd07ccfd57d24
-
SHA512
597d6ba7aa89ce3aad8f2f69cfbcdeaf1af903f41e956378b4e03f06fb4e82b5bcec470c54a856a98935490fe3debd9a04e5a71772cb4b57c5d92d810fc75f76
-
SSDEEP
384:1oWtkEwn65rgjAsGipk55D16xgXakhbZD0mRvR6JZlbw8hqIusZzZyR:67O89p2rRpcnu1
Malware Config
Extracted
njrat
0.7d
HacKed
127.0.01:5552
6a891c423d3e260890c304c18950c534
-
reg_key
6a891c423d3e260890c304c18950c534
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
46794c2854aa5c8c14a0f3801c9f0c9dc49787c57d4ccccf5e7dd07ccfd57d24.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ