Behavioral task
behavioral1
Sample
3264e2217bc43bff839113ed6099b53453794898190e23fc53f264d82a6aa649.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3264e2217bc43bff839113ed6099b53453794898190e23fc53f264d82a6aa649.exe
Resource
win10v2004-20220812-en
General
-
Target
3264e2217bc43bff839113ed6099b53453794898190e23fc53f264d82a6aa649
-
Size
23KB
-
MD5
e94d6813df19897ba60649e31d6ccc8d
-
SHA1
812bbc7806049b47c6bf5817ae0743110344c791
-
SHA256
3264e2217bc43bff839113ed6099b53453794898190e23fc53f264d82a6aa649
-
SHA512
a837afc7534533b3e24da5299430eed863462efe86350019075cb7be0ec6df4e5f1bad7764c9ca8cf260c7eedcd6e98d5d87333e6157bd2bff8eeb9b495eddef
-
SSDEEP
384:zsqS+ER6vRKXGYKRWVSujUtX9w6Dglo61Z5DVmRvR6JZlbw8hqIusZzZdQ:of65K2Yf1jKRpcnuh
Malware Config
Extracted
njrat
0.7d
HacKed
eloahsh.no-ip.info:80
ae1c4153f712f7ee67f03ec07efcb74a
-
reg_key
ae1c4153f712f7ee67f03ec07efcb74a
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
3264e2217bc43bff839113ed6099b53453794898190e23fc53f264d82a6aa649.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ