Behavioral task
behavioral1
Sample
035d23f7c3e7532c2bd1fede414774332f0523f245dfade7484415b86e5e3d1c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
035d23f7c3e7532c2bd1fede414774332f0523f245dfade7484415b86e5e3d1c.exe
Resource
win10v2004-20221111-en
General
-
Target
035d23f7c3e7532c2bd1fede414774332f0523f245dfade7484415b86e5e3d1c
-
Size
23KB
-
MD5
a57c6eae4b5f3ae319570807a5e06e91
-
SHA1
2748974f33c36a044e465cd90175a727ea54b2b4
-
SHA256
035d23f7c3e7532c2bd1fede414774332f0523f245dfade7484415b86e5e3d1c
-
SHA512
05c5df8820fb0e23a4dd1718558323c80696f3c3475b85083008fd7b03c99c9e694a3eb7583cf6eb80053d0963d57ca9345ba1006351a2fad7dc5d23a0dd47eb
-
SSDEEP
384:tMK6b2GZsx/Yr1+liORH1kcPFQ6Lg9gSOYRr9mRvR6JZlbw8hqIusZzZR7S:ub9glF51LRpcnuKW
Malware Config
Extracted
njrat
0.7d
HacKed
ranahena.no-ip.info:5552
c0eaa58727bfca91d63761b96de8ab7d
-
reg_key
c0eaa58727bfca91d63761b96de8ab7d
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
035d23f7c3e7532c2bd1fede414774332f0523f245dfade7484415b86e5e3d1c.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ