Behavioral task
behavioral1
Sample
3c2302ce74d977e76a7f6da06db09bdbde6b683d61891cda29f8f6da7bf210ae.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3c2302ce74d977e76a7f6da06db09bdbde6b683d61891cda29f8f6da7bf210ae.exe
Resource
win10v2004-20220812-en
General
-
Target
3c2302ce74d977e76a7f6da06db09bdbde6b683d61891cda29f8f6da7bf210ae
-
Size
28KB
-
MD5
641ab8a51b471311e248818eb68f1330
-
SHA1
4b6f99c73f595aff58a403fd57621b8e4a4b2f71
-
SHA256
3c2302ce74d977e76a7f6da06db09bdbde6b683d61891cda29f8f6da7bf210ae
-
SHA512
68a2025e06c0cf616e60a741e2139e866c0cb17365aca8b4b3a399a928638df01bd0b8d427f28a6fb2735f9dfd2ffb70a8f7f87c4e01fd57be2e32db118929ae
-
SSDEEP
384:sQJWfqAlnkcfNJhHOr/1JilofM+slyZ+cn2l0LE2e1gJvubiQZIospjT1nJy/e:q1lnkoJ0iWfMnMW0LktbW
Malware Config
Signatures
-
Njrat family
Files
-
3c2302ce74d977e76a7f6da06db09bdbde6b683d61891cda29f8f6da7bf210ae.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ