Behavioral task
behavioral1
Sample
ai es kaia.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ai es kaia.exe
Resource
win10v2004-20220812-en
General
-
Target
ai es kaia.exe
-
Size
37KB
-
MD5
b683d47d7f9e6cacbd23a8fdd0862468
-
SHA1
2f94f8d5703650348b7cfa9d6000597d3313e6d8
-
SHA256
bb98bd193b6e0f3e401d365431b3843fca3690d08868c6c271cc94fbca9f4eb3
-
SHA512
ad5b2f273aa679d695e7139459b7b12cb1d2cacf3494304155dc1858deedaf1d4307a10261ceb5f18199878ffc4af6d73ad34e95bf44b4b790963d45938e13eb
-
SSDEEP
384:tmlqiU154NLHdayszHtyPpzsobO7krAF+rMRTyN/0L+EcoinblneHQM3epzXVNrm:o/ZdJszHtyxVOIrM+rMRa8NuDct
Malware Config
Extracted
njrat
im523
HacKed
comes-corruption.at.ply.gg:18147
9291c9c07ce78aa432739e5edea9dc79
-
reg_key
9291c9c07ce78aa432739e5edea9dc79
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
ai es kaia.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ