Behavioral task
behavioral1
Sample
3d0de07361779da3582d5499ce02ee70cae9444bf1fa71fc41eca3803093d17d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3d0de07361779da3582d5499ce02ee70cae9444bf1fa71fc41eca3803093d17d.exe
Resource
win10v2004-20221111-en
General
-
Target
3d0de07361779da3582d5499ce02ee70cae9444bf1fa71fc41eca3803093d17d
-
Size
23KB
-
MD5
c8e5a67cc645306abb2d21b8f8161247
-
SHA1
1d25f45643518fb8077eef1405952d685a412db3
-
SHA256
3d0de07361779da3582d5499ce02ee70cae9444bf1fa71fc41eca3803093d17d
-
SHA512
e593b1742616493ca7a758c0f1ebf7664e86143a05514db999f6196709a2a019ee7f6b2a7823075923136733d7b2c6736e7f3e132f987ac8379ae3efddee8cb1
-
SSDEEP
384:A8c68yCaUVIhboNgfEimfkNzayS06vg5UhcpxH7ndmRvR6JZlbw8hqIusZzZN0:Ai873kgNfoaf6ARpcnuN
Malware Config
Extracted
njrat
0.7d
snn
raya.zapto.org:5552
d6a1569ade0a1c73f1b0b1b110bc8302
-
reg_key
d6a1569ade0a1c73f1b0b1b110bc8302
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
3d0de07361779da3582d5499ce02ee70cae9444bf1fa71fc41eca3803093d17d.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ