Behavioral task
behavioral1
Sample
1ef6c0aa2e72a538b16526922f075e25953c9f453ebbc93fe05511a0df96d1ac.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1ef6c0aa2e72a538b16526922f075e25953c9f453ebbc93fe05511a0df96d1ac.exe
Resource
win10v2004-20220812-en
General
-
Target
1ef6c0aa2e72a538b16526922f075e25953c9f453ebbc93fe05511a0df96d1ac
-
Size
23KB
-
MD5
456529bc4bf42a43ae3ccfc01525a0be
-
SHA1
72cc945607202a34963b8846edcb8c0e6f217a2f
-
SHA256
1ef6c0aa2e72a538b16526922f075e25953c9f453ebbc93fe05511a0df96d1ac
-
SHA512
b0969ef95a0cb7e3f9d4f649d155f92f41455e1b7360eec48cb94506e1dc523e3047a1b3e7458db03256f38d27f78967bedf08a194958cfc0a2212526949e439
-
SSDEEP
384:FsqS+ER6vRKXGYKRWVSujUtX9w6Dglo61Z5DVmRvR6JZlbw8hqIusZzZvF:Of65K2Yf1jKRpcnuu
Malware Config
Extracted
njrat
0.7d
HacKed
asoom.hopto.org:1900
5485fff03c7c0aac3ccff762ae1790ff
-
reg_key
5485fff03c7c0aac3ccff762ae1790ff
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
1ef6c0aa2e72a538b16526922f075e25953c9f453ebbc93fe05511a0df96d1ac.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ