Behavioral task
behavioral1
Sample
8f1737c0fac5260a56b6a325ae2e374f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8f1737c0fac5260a56b6a325ae2e374f.exe
Resource
win10v2004-20221111-en
General
-
Target
8f1737c0fac5260a56b6a325ae2e374f.exe
-
Size
37KB
-
MD5
8f1737c0fac5260a56b6a325ae2e374f
-
SHA1
8aa1cc67270092e9dde46fd67ceb60e3fd2c0acf
-
SHA256
df5e27452c12c3efb7ef8e103337db609c122cd150dcc9f4d580c37c196006f5
-
SHA512
5853e6b79867b1b6ba355504bde1fad906f63b74bc911b4b7f01aa28541e6cc6d2197c567a70fa7a94c0b13faf55cb31c4f6540db57c388be0a70098257b5baf
-
SSDEEP
384:ICFTgiG1CRZfursvO6yszMFs/DSTHv0LUrAF+rMRTyN/0L+EcoinblneHQM3epzv:ZFN5WpszMFsmjv0QrM+rMRa8NuDvt
Malware Config
Extracted
njrat
im523
HacKed
paradox.uno:5554
5661f58838e58099465c31ca9d2c4c2f
-
reg_key
5661f58838e58099465c31ca9d2c4c2f
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
8f1737c0fac5260a56b6a325ae2e374f.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ