Behavioral task
behavioral1
Sample
7eabcccdd626bbb3883ec3984f0fe573.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
7eabcccdd626bbb3883ec3984f0fe573.exe
Resource
win10v2004-20230220-en
General
-
Target
7eabcccdd626bbb3883ec3984f0fe573.exe
-
Size
37KB
-
MD5
7eabcccdd626bbb3883ec3984f0fe573
-
SHA1
bd03afef8d7c4398edf3be8256d98e195b371aa3
-
SHA256
986318ede14f0c866a87c7a9afb87a86cf126e223608c017e94a9b6cedada3a1
-
SHA512
827009e45bbf3a3110658c5c546325174f334e6533cb4633fc3ed15063180e30457d83f3cae5b6d23e5fd0a12c1ebd5fa3b362b1d5c69bbb6c57bbdb3e1048b5
-
SSDEEP
384:p6l+yw7BeAaXaEiVbzdmB0O4yUvNixgp+Z2v/RYJ/oM6IMrAF+rMRTyN/0L+Ecoi:ocyw79POTUvNZYv6trM+rMRa8Nu2qt
Malware Config
Extracted
njrat
im523
HacKed
51.79.205.152:5552
56ba8666b184f20ecaf6484958a533b4
-
reg_key
56ba8666b184f20ecaf6484958a533b4
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
7eabcccdd626bbb3883ec3984f0fe573.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ