Behavioral task
behavioral1
Sample
3dca40fc6a4af425f0daa8b6ae6f8cf144c266784451030e5a8ab41ad6465dca.exe
Resource
win7-20220901-en
General
-
Target
3dca40fc6a4af425f0daa8b6ae6f8cf144c266784451030e5a8ab41ad6465dca
-
Size
23KB
-
MD5
aaebdfa51642d64a81aefb6f096d5bad
-
SHA1
a2f05c135842bb9cd4c959d2ef8427474c09d51d
-
SHA256
3dca40fc6a4af425f0daa8b6ae6f8cf144c266784451030e5a8ab41ad6465dca
-
SHA512
11012e8d0475911ba095096c029c33828e50e51c407378c98f5e1294c2ffa34bb20c70072bdf37caf7b8229008253fa1e68a9704cbe60cc1fceb99043d9682fb
-
SSDEEP
384:5I2SUwXh0ZbAzlRGCvkodj46hgHK0hrV5mRvR6JZlbw8hqIusZzZsFZu:ObhEkdvXRpcnutu
Malware Config
Extracted
njrat
0.7d
HacKed
shibatrampos.no-ip.org:3334
9ea492b185e99111d4654504865b0d7e
-
reg_key
9ea492b185e99111d4654504865b0d7e
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
3dca40fc6a4af425f0daa8b6ae6f8cf144c266784451030e5a8ab41ad6465dca.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ