Behavioral task
behavioral1
Sample
c0dbbc6e77a3b9cdad5563e7c814e053.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c0dbbc6e77a3b9cdad5563e7c814e053.exe
Resource
win10v2004-20221111-en
General
-
Target
c0dbbc6e77a3b9cdad5563e7c814e053.exe
-
Size
37KB
-
MD5
c0dbbc6e77a3b9cdad5563e7c814e053
-
SHA1
c814d27d1c1e7963c7d3ba533025918d70fc1ef2
-
SHA256
62723ed12c72ceb21bc77c63811f58ab082b36bd8487531d8b52e4de5030c7f1
-
SHA512
7f6bd0194165cc713a35139f1a342fe3150d0b53996985d8cb487b1c1cd9ea352d2d21941bd9f26920f73953185d814c9c95e976b82ccd1cd66fb50e6258364a
-
SSDEEP
384:OA0GK3hUidkcXR21cGMy8P4E5fXUFl6M0lrAF+rMRTyN/0L+EcoinblneHQM3ep:R0GK3rLGv8P4E58qMorM+rMRa8Nunmt
Malware Config
Extracted
njrat
im523
HacKed
104.22.32.240:443
a1d3fe53d6645a42400095b4adec79f5
-
reg_key
a1d3fe53d6645a42400095b4adec79f5
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
c0dbbc6e77a3b9cdad5563e7c814e053.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ