Behavioral task
behavioral1
Sample
3f6efa7e24368a477c6404a8a92ef1b1ab9cda8c712b1849a75b4735a4602151.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
3f6efa7e24368a477c6404a8a92ef1b1ab9cda8c712b1849a75b4735a4602151.exe
Resource
win10v2004-20220414-en
General
-
Target
3f6efa7e24368a477c6404a8a92ef1b1ab9cda8c712b1849a75b4735a4602151
-
Size
31KB
-
MD5
1cda2dbc2d404fffa360306b72c2fc3b
-
SHA1
28c4bb45227a6b90c1302aaa2e6819ae2b6eddc4
-
SHA256
3f6efa7e24368a477c6404a8a92ef1b1ab9cda8c712b1849a75b4735a4602151
-
SHA512
1b69a918085a4b3299ae53e33b9494df41b40b172e56831fd06673f8d5a22023453cc7da07b16a5c4ba85cc8a4310b75e169bf4f71daafa29b705cbb36db20fc
-
SSDEEP
768:/jMXxwpJbb2zxxO5Q6qHJisfviIQmIDUu0tiN6j:wkKpisrQVk5j
Malware Config
Extracted
njrat
0.7d
ftloader
127.0.0.1:6522
fc3d83f540a38fef9736e485dede41c7
-
reg_key
fc3d83f540a38fef9736e485dede41c7
-
splitter
Y262SUCZ4UJJ
Signatures
-
Njrat family
Files
-
3f6efa7e24368a477c6404a8a92ef1b1ab9cda8c712b1849a75b4735a4602151.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ