Behavioral task
behavioral1
Sample
a45016868e7e336729ae576226e1edc62bcd8e4b599f14b8d148abcc0c7bdcdb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a45016868e7e336729ae576226e1edc62bcd8e4b599f14b8d148abcc0c7bdcdb.exe
Resource
win10v2004-20220812-en
General
-
Target
a45016868e7e336729ae576226e1edc62bcd8e4b599f14b8d148abcc0c7bdcdb
-
Size
23KB
-
MD5
1c2af4d7e960fe58a7a71e28aa71c906
-
SHA1
7cd991e0f36a43f97b34f36fb786ae0170fb9f01
-
SHA256
a45016868e7e336729ae576226e1edc62bcd8e4b599f14b8d148abcc0c7bdcdb
-
SHA512
f4ae8099411828dba87cbfa238e86fe5e1283f78e299a6294b01da27201e8dd3efa4c3bb6602bb5fb709aa5918be3b595cdc66bd68e0255447214f0048a34561
-
SSDEEP
384:LoWSkWHa55BgDVRGipkItzY6vZg36Eh7FpmRvR6JZlbw8hqIusZzZEO:kJuk9pHRpcnuE
Malware Config
Extracted
njrat
0.7d
HacKed
mizono.noip.me:1177
8a9ca6ec179026a0a392fcac75f0474d
-
reg_key
8a9ca6ec179026a0a392fcac75f0474d
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
a45016868e7e336729ae576226e1edc62bcd8e4b599f14b8d148abcc0c7bdcdb.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ