Behavioral task
behavioral1
Sample
3eb55efbadc6df7484f86911984afe79a20e5febef77d173b0866b1225849374.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3eb55efbadc6df7484f86911984afe79a20e5febef77d173b0866b1225849374.exe
Resource
win10v2004-20221111-en
General
-
Target
3eb55efbadc6df7484f86911984afe79a20e5febef77d173b0866b1225849374
-
Size
171KB
-
MD5
aa93bd6dee6dc660994e7165e0d26545
-
SHA1
6cbc6783ec9214020d5f3c661c39aab439245f98
-
SHA256
3eb55efbadc6df7484f86911984afe79a20e5febef77d173b0866b1225849374
-
SHA512
83c43d435563e9046a0603d6951eba1e9a891a6ef81b6afd9d461338e5aafa77476bb212c9a3fd05a97059e8d3f02025e6df83d5ff2bcbc936c4bad4740d033b
-
SSDEEP
3072:D6Ma80UGC+f9DnUmCX+BvVTT8Lg29ieLAlF1R9AuAjc:ycGT10XINTT8LgAFAl7R9u
Malware Config
Extracted
njrat
0.7d
DoS
73.161.121.196:1336
d447f8d42b2a98d8569cb6b079e37f34
-
reg_key
d447f8d42b2a98d8569cb6b079e37f34
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
3eb55efbadc6df7484f86911984afe79a20e5febef77d173b0866b1225849374.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 149KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ