Behavioral task
behavioral1
Sample
3c386a66e5f1d1b341a1466abdfd137fc23b39956009a5eb149386634b0515d1.exe
Resource
win7-20220901-en
General
-
Target
3c386a66e5f1d1b341a1466abdfd137fc23b39956009a5eb149386634b0515d1.exe
-
Size
5.0MB
-
MD5
e3909de6ca1d545d7c45dff1d9a09fe4
-
SHA1
1624adb1b664a82b1e2605227e017d339d6f52e9
-
SHA256
3c386a66e5f1d1b341a1466abdfd137fc23b39956009a5eb149386634b0515d1
-
SHA512
af1b420ba7688823b0b9624751862f5d822b1a7da41b4c39d2db066aefc0d74796f172f817738d70b0b5332dc27ea13e8677a44f9fd563ff088081f0ceaac04f
-
SSDEEP
49152:WaFPC7nRODEYCFEvlmOmTgtFM3uK5m3imrHuiff+puWV355FXw/+zuWV355FXw/C:FYR8EYzEFTgtFM3ukm3imPntpRrR
Malware Config
Signatures
-
Njrat family
Files
-
3c386a66e5f1d1b341a1466abdfd137fc23b39956009a5eb149386634b0515d1.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4.8MB - Virtual size: 4.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 120KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ