Behavioral task
behavioral1
Sample
3cef99a5378958179cc375f4881ba244f352baf734ca2778175ea26f6ccb5eec.exe
Resource
win7-20220812-en
General
-
Target
3cef99a5378958179cc375f4881ba244f352baf734ca2778175ea26f6ccb5eec
-
Size
29KB
-
MD5
4301a288ae341240f90bfce80edc96a0
-
SHA1
43c10755e490d3d369c7f140dd073a503f7a6f50
-
SHA256
3cef99a5378958179cc375f4881ba244f352baf734ca2778175ea26f6ccb5eec
-
SHA512
92f2403f2d508e13c852b5f6d7ec8a42758cdc47b4eaf4c27e0bd58b5513f63dc901de8aa56089f55b07a50fddbd49ca377ca2cdfc219be665745d784853f2d3
-
SSDEEP
768:Ov/27NYsDkfZPoIqlHepBKh0p29SgR+8:Om7N143wEKhG29j+8
Malware Config
Extracted
njrat
0.6.4
Qpet1
doa2dw.zapto.org:3517
94d7ffd95f75c5c12a7eae4abf7dba77
-
reg_key
94d7ffd95f75c5c12a7eae4abf7dba77
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
3cef99a5378958179cc375f4881ba244f352baf734ca2778175ea26f6ccb5eec.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ