Behavioral task
behavioral1
Sample
b257e67bf0f07d9da9bbeae234cc83bf.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
b257e67bf0f07d9da9bbeae234cc83bf.exe
Resource
win10v2004-20230220-en
General
-
Target
b257e67bf0f07d9da9bbeae234cc83bf.exe
-
Size
37KB
-
MD5
b257e67bf0f07d9da9bbeae234cc83bf
-
SHA1
58ade1ccb84ff6d14d3a97f417af4ae44685ff3a
-
SHA256
6722674f72bb654e619e9314a0c32936438932064ed3ff7872100a17317095ce
-
SHA512
cfd47f7eaf262bdeb99d21ff503b962db6cb3af9ce02f3b19b8af515bda7729a4bef176b443e9b70b3cc20ac0f1240c32a435863f51e2302902bea5f8b0599ec
-
SSDEEP
384:FmOs0IiejvCVLO309QmykrtG+dA+VCwvOSifrAF+rMRTyN/0L+EcoinblneHQM3R:nFdGdkrgYUwWS0rM+rMRa8NuK9t
Malware Config
Extracted
njrat
im523
HacKed
5.tcp.eu.ngrok.io:16049
772461c24a30886a7c453c9654e24c6a
-
reg_key
772461c24a30886a7c453c9654e24c6a
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
b257e67bf0f07d9da9bbeae234cc83bf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ