General
-
Target
Icon Extractor.exe
-
Size
55KB
-
MD5
3bd13e7f67e57002901344ba21f66cdd
-
SHA1
581cb67a398e3ac2432dda4d7cc37e5d32176bea
-
SHA256
3d3605d7d6933321041c4b9aa7442eaccde21c9e2f75447d133c0b6c0c7f4320
-
SHA512
114b6969353f4419a120893c4249543a9275e2d2207ffffd38f668f1d86aaca164edb0eb5300e70a48cca78415d6f36b06732a37d009cd14e2118c2ceff89799
-
SSDEEP
768:T6a6lOt1Man8E2N6FikUt34okSNcmwFvfu0YMDHPs3L7XJSxI3pmtm:T61cDnCN6FikSJDpwsNMDSXExI3pmtm
Malware Config
Extracted
njrat
<- NjRAT 0.7d Horror Edition ->
Victim
oxy01.duckdns.org:6522
8c47e740704afa553c0acf7809e56295
-
reg_key
8c47e740704afa553c0acf7809e56295
-
splitter
Y262SUCZ4UJJ
Signatures
-
Njrat family
Files
-
Icon Extractor.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ