Behavioral task
behavioral1
Sample
MegaHack V7.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
MegaHack V7.exe
Resource
win10v2004-20230915-en
General
-
Target
MegaHack V7.exe
-
Size
455KB
-
MD5
798ac197327eb33583ecc1d65d07cee5
-
SHA1
f0afc1a376dfb71c09dbdb8d2a77e0146e20b95a
-
SHA256
2da26953aa442cc065c5bbcf333137b02d92f12239e77d6a411fbfb964c381ff
-
SHA512
6720225b8f92d0b48b7e7fc6abe4bcbaad1edbd4d04c0bb7c2a2568642a6f6e10447f35eaec5b1071bee042984230d0beb238040840a3f01fa50d6946bdf5d03
-
SSDEEP
3072:PMTh9pWji/ZRPPPPPPPPPPPPPP1LYB9mtHnl0/2V1hy/DI0TPbxRRRRRRRRRRRR0:U19ei/jSMFkzqyuB/
Malware Config
Extracted
njrat
0.7d
MegaHack
0.tcp.us-cal-1.ngrok.io:18448
5c8853c0f6424ce8d16fee0892afcfd9
-
reg_key
5c8853c0f6424ce8d16fee0892afcfd9
-
splitter
Y262SUCZ4UJJ
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource MegaHack V7.exe
Files
-
MegaHack V7.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 425KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ