Behavioral task
behavioral1
Sample
3e49ee97714da6fdde1963624b2fdfa24a368c68a151630276b272163ce43f9d.exe
Resource
win7-20220414-en
General
-
Target
3e49ee97714da6fdde1963624b2fdfa24a368c68a151630276b272163ce43f9d
-
Size
31KB
-
MD5
4c3fe802909235ddb4202eda5ead4d1e
-
SHA1
1e6f88ead6df2d9f1c99e037f2a6141bcf65aa59
-
SHA256
3e49ee97714da6fdde1963624b2fdfa24a368c68a151630276b272163ce43f9d
-
SHA512
845c1fb3bea189e927df5b3e04eb87744eec04cabbc07d86a5760749613876858aab7a1a3bdf58973dbbc0a0f7851644c399b6771125e0ca7d5be7c1250f966d
-
SSDEEP
768:ldQZlGFnf6zxV+Ny/kfxfbvCYoQmIDUu0ti0zDj:AIq8bnoQVkLj
Malware Config
Extracted
njrat
0.7d
q
192.168.1.3:7777
ad0e8fb502ecf928942daab540ba981e
-
reg_key
ad0e8fb502ecf928942daab540ba981e
-
splitter
Y262SUCZ4UJJ
Signatures
-
Njrat family
Files
-
3e49ee97714da6fdde1963624b2fdfa24a368c68a151630276b272163ce43f9d.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ