Behavioral task
behavioral1
Sample
816bec80805e3aefb9374935f9326cc6.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
816bec80805e3aefb9374935f9326cc6.exe
Resource
win10v2004-20230220-en
General
-
Target
816bec80805e3aefb9374935f9326cc6.exe
-
Size
37KB
-
MD5
816bec80805e3aefb9374935f9326cc6
-
SHA1
e34c370564a014ce62a348346a1bbfd12f01555a
-
SHA256
de194a0227d357129c719456e44d99cd6bd984d20149ce7096ba4f1d794a3b88
-
SHA512
df657e3ef5d2ed51eee6e28e143dd299eea604e4399fdc10fd0f1b52ab58b40de23fea9cc6f8aeaf11a9522f1414ab7c93be39101cf5c8004ccae82834eb462f
-
SSDEEP
384:i0SvEiTbTvpWNcZ0y8fvCv3v3cLkacpjrAF+rMRTyN/0L+EcoinblneHQM3epzXq:VS7TZ38fvCv3E1c1rM+rMRa8NuOPt
Malware Config
Extracted
njrat
im523
HacKed
7.tcp.eu.ngrok.io:15593
f9535d1dd682c0a54e42235c04e4809e
-
reg_key
f9535d1dd682c0a54e42235c04e4809e
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
816bec80805e3aefb9374935f9326cc6.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ