Behavioral task
behavioral1
Sample
3d6120143407a3e5f32c2a6f82faf08e.exe
Resource
win7-20220812-en
General
-
Target
3d6120143407a3e5f32c2a6f82faf08e.exe
-
Size
93KB
-
MD5
3d6120143407a3e5f32c2a6f82faf08e
-
SHA1
26f129c5dd718a21bb6d3a2066d10962ef703e52
-
SHA256
cf0e4d62de51c2185b7c0eb600ec9d13855fa07e6ca7f31774f5a49d61408e40
-
SHA512
7d7efb8aa101e6017e133d59ef334f912e1390f3d6de4444d4149086a6f9dc17d6be23e8ad21744edfef58ea29bca62431dbd6e8c5d11603cc57f8a9068aa9e4
-
SSDEEP
1536:1GUQIBlfGQFk2ZonmzlMxjEwzGi1dDVsDzgS:1GytFk2ZonmZMOi1dEs
Malware Config
Extracted
njrat
0.7d
chel
Ni50Y3AuZXUubmdyb2suaW8Strik:MTc3NTI=
0b8e7c1955ab731e07143e343d51f7c9
-
reg_key
0b8e7c1955ab731e07143e343d51f7c9
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
3d6120143407a3e5f32c2a6f82faf08e.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ