Behavioral task
behavioral1
Sample
3f93629d7ea8fbb560c43c5129405150fc959e0ccee82d82c5e27fb3bcd651f7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3f93629d7ea8fbb560c43c5129405150fc959e0ccee82d82c5e27fb3bcd651f7.exe
Resource
win10v2004-20220812-en
General
-
Target
3f93629d7ea8fbb560c43c5129405150fc959e0ccee82d82c5e27fb3bcd651f7
-
Size
357KB
-
MD5
750ebdcc4e06e6529ec950acf5687e50
-
SHA1
ec1e7bd2836d912f99fa37a06c87ba06f4cd178c
-
SHA256
3f93629d7ea8fbb560c43c5129405150fc959e0ccee82d82c5e27fb3bcd651f7
-
SHA512
cb7290c8de6b80e17b382082ea53feab8051fa2c3001a51e8188de8b05a0259ccd86ca801209e2c66eb50d0b6c154e26689f1b97b866dcdfce5883e3d2a871cd
-
SSDEEP
6144:dDC+G1MmyQzqzy08DAJm6iEZezGeaYmV2abXgikElOJz0cWHBmqEVQy9JPtmV0G:4+GKKfDmXHZezdamkgNW
Malware Config
Signatures
-
Njrat family
Files
-
3f93629d7ea8fbb560c43c5129405150fc959e0ccee82d82c5e27fb3bcd651f7.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 113B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 322KB - Virtual size: 321KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ