Behavioral task
behavioral1
Sample
09a039699d3c2b826e5e2f8ad90f50fc.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
09a039699d3c2b826e5e2f8ad90f50fc.exe
Resource
win10v2004-20230220-en
General
-
Target
09a039699d3c2b826e5e2f8ad90f50fc.exe
-
Size
37KB
-
MD5
09a039699d3c2b826e5e2f8ad90f50fc
-
SHA1
158c98ba265e4829c203771eb566d607c5ab0f72
-
SHA256
6c3183412fc318d586ba196d42f9399ecc84500d4624377752b4952442236093
-
SHA512
a17c7e95fd27806da95776a81fe864e8050cbbaeb9d937ddbf2ef6dd38c88dfab5017df6706e9c1e74b51ff9ebdad22a9e78b21dcf6d8351dbba1a9c6df1d547
-
SSDEEP
384:/0qBkiyjnDNGRn5IyUvapIrPbh+/VsIt6xrAF+rMRTyN/0L+EcoinblneHQM3epD:M35M5jUvairANsIQxrM+rMRa8Nuu0t
Malware Config
Extracted
njrat
im523
HacKed
8.tcp.ngrok.io:10809
477e42ad55ebd15287499bd5aac86f08
-
reg_key
477e42ad55ebd15287499bd5aac86f08
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
09a039699d3c2b826e5e2f8ad90f50fc.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ