Behavioral task
behavioral1
Sample
ee382b41b912dbac4a0a63cef54b27caa0c69d0bd754ee33039fc6d7f13399e0.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ee382b41b912dbac4a0a63cef54b27caa0c69d0bd754ee33039fc6d7f13399e0.exe
Resource
win10v2004-20230220-en
General
-
Target
ee382b41b912dbac4a0a63cef54b27caa0c69d0bd754ee33039fc6d7f13399e0
-
Size
37KB
-
MD5
c0d376fd24dff8ad62ec240fb4ed799c
-
SHA1
e86cfbd87617719055efcc1e3233566ed376d113
-
SHA256
ee382b41b912dbac4a0a63cef54b27caa0c69d0bd754ee33039fc6d7f13399e0
-
SHA512
0ab54abf4c98154cd4b7a4206d144b51b47bf21e7b955888184737194152a97e71283f89e57efa4f327fddd91c2eff466e4b2fec92fc1a267ba27e18b06c9b2c
-
SSDEEP
384:/LAlqiU154NLHdayszHtyPpzsobO75rAF+rMRTyN/0L+EcoinblneHQM3epzXoNX:k/ZdJszHtyxVOtrM+rMRa8NuGrt
Malware Config
Extracted
njrat
im523
HacKed
cart-updates.at.ply.gg:27239
3e2a5fa61c82d0b7ac3bb07c4edb1f56
-
reg_key
3e2a5fa61c82d0b7ac3bb07c4edb1f56
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
ee382b41b912dbac4a0a63cef54b27caa0c69d0bd754ee33039fc6d7f13399e0.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ