Behavioral task
behavioral1
Sample
3705c592d61adb7ebfecfc081d734fcd716a726e75c1cfea9ab98449f43fbd3f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3705c592d61adb7ebfecfc081d734fcd716a726e75c1cfea9ab98449f43fbd3f.exe
Resource
win10v2004-20221111-en
General
-
Target
3705c592d61adb7ebfecfc081d734fcd716a726e75c1cfea9ab98449f43fbd3f
-
Size
23KB
-
MD5
8a79806a0c8a6f5a838db86eba48ca43
-
SHA1
3066a35b8adcec0d1b7a5e97ffecfd5ae51a8d9a
-
SHA256
3705c592d61adb7ebfecfc081d734fcd716a726e75c1cfea9ab98449f43fbd3f
-
SHA512
683b739c80e42f3d2c283d2d119d2328b41e015f8cbf1735ceeadbf6755aa4bf067884fa49abb4749b55b04f04f083715de2af905d7ac0ab63beae5cf8b5e5e2
-
SSDEEP
384:+QeCo2zmZbQHkJeCdUwBvQ61gjuQBnB9mRvR6JZlbw8hqIusZzZQn:55yBVd7RpcnuR
Malware Config
Extracted
njrat
0.7d
HacKed
tamtojan.no-ip.org:5552
5109f5bda0884c60544401793d1c3b28
-
reg_key
5109f5bda0884c60544401793d1c3b28
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
3705c592d61adb7ebfecfc081d734fcd716a726e75c1cfea9ab98449f43fbd3f.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ