Behavioral task
behavioral1
Sample
1dff93edc95d4f9e8c726c090963e869.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1dff93edc95d4f9e8c726c090963e869.exe
Resource
win10v2004-20221111-en
General
-
Target
1dff93edc95d4f9e8c726c090963e869.exe
-
Size
37KB
-
MD5
1dff93edc95d4f9e8c726c090963e869
-
SHA1
848ccccc818b18a25d15cb86c80f035faaa65602
-
SHA256
5514b248a095c1f8cd6ff3091ea299706b0141cde405506ad4fc268bca4e54ad
-
SHA512
c41c1d7e27ea07ab4662c45deac84a05dbb2f52fba5fc6a19ee72111e6a3f8ae7df6f3d3a15afe9359f62c3ad1566a9990ca96b2a2bc67029ab2077f75ab0620
-
SSDEEP
384:qytcaCisp/WRdL5kyc/rCH1hngC+hgrAF+rMRTyN/0L+EcoinblneHQM3epzXdNO:LtcOD5nc/rCPd+KrM+rMRa8NurQt
Malware Config
Extracted
njrat
im523
LOL EZ
6.tcp.eu.ngrok.io:18280
c83dd82f2d178ed25b7cb1c9e9774d60
-
reg_key
c83dd82f2d178ed25b7cb1c9e9774d60
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
1dff93edc95d4f9e8c726c090963e869.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ