Behavioral task
behavioral1
Sample
3b73e3ca2798dcb4c086523c9a371bd888a3e0583825e7e712e6aa3f8c91705e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3b73e3ca2798dcb4c086523c9a371bd888a3e0583825e7e712e6aa3f8c91705e.exe
Resource
win10v2004-20220812-en
General
-
Target
3b73e3ca2798dcb4c086523c9a371bd888a3e0583825e7e712e6aa3f8c91705e
-
Size
29KB
-
MD5
9575d333eac2450e65620aecb43260f4
-
SHA1
f2d458ec2ca0d2e3ddd36718fa5c6d0b2814438d
-
SHA256
3b73e3ca2798dcb4c086523c9a371bd888a3e0583825e7e712e6aa3f8c91705e
-
SHA512
8b1a968bcc800863f3379553d1f5cd81d80c5d55985e0cd84f7838ea7357153d7debc8eaeaeab000179296f58ac5aefdd4122ab00f0789cb3cfbac00f2ca580d
-
SSDEEP
768:t7bXEI+Ge1gFaY09zLeiBKh0p29SgRIw:t7bXh7iznKhG29jIw
Malware Config
Extracted
njrat
0.6.4
HacKed
kissmefast.ddns.net:1177
ba4c12bee3027d94da5c81db2d196bfd
-
reg_key
ba4c12bee3027d94da5c81db2d196bfd
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
3b73e3ca2798dcb4c086523c9a371bd888a3e0583825e7e712e6aa3f8c91705e.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ