Behavioral task
behavioral1
Sample
a84f13afc66598bc51a2a5fa77633a67.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a84f13afc66598bc51a2a5fa77633a67.exe
Resource
win10v2004-20220812-en
General
-
Target
a84f13afc66598bc51a2a5fa77633a67.exe
-
Size
37KB
-
MD5
a84f13afc66598bc51a2a5fa77633a67
-
SHA1
188de3787a2ef16e57062ab794920f9d3957e4f5
-
SHA256
d854634ea4a92c5775d1edaf805c7a754d45e8e568bcda853ddcbde2b891a8e3
-
SHA512
045bd70f7de1d604b3f5fee700658ffe8347b09e2437e16652c0f58078e33a148750a59f581b043fc190bb63e4a8217340f26e476a211b2d6aea741cba416d06
-
SSDEEP
384:i8KvEiTbHvpWNcZ0y8f7CTvvrdLkCwE3rAF+rMRTyN/0L+EcoinblneHQM3epzXg:dKXTZ38f7CTvpFwKrM+rMRa8NusTt
Malware Config
Extracted
njrat
im523
HacKed
6.tcp.eu.ngrok.io:11553
99c4d82f0922d38c6f975842331ad8f5
-
reg_key
99c4d82f0922d38c6f975842331ad8f5
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
a84f13afc66598bc51a2a5fa77633a67.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ