Behavioral task
behavioral1
Sample
3ef0418afacad8b3e9cb5d55f8d4d6d8eb6b03b03d1919a8ad114c048a32aa46.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3ef0418afacad8b3e9cb5d55f8d4d6d8eb6b03b03d1919a8ad114c048a32aa46.exe
Resource
win10v2004-20221111-en
General
-
Target
3ef0418afacad8b3e9cb5d55f8d4d6d8eb6b03b03d1919a8ad114c048a32aa46
-
Size
27KB
-
MD5
1ea520ddbc9968d91e14501734afe7ee
-
SHA1
c0176d0aa39e361b0e33a5348193f9d85a5b370f
-
SHA256
3ef0418afacad8b3e9cb5d55f8d4d6d8eb6b03b03d1919a8ad114c048a32aa46
-
SHA512
b5e51670cd4e22521142285fcd264b8752e6b2a01a8e67cf6db05d77c94ce9b4ae117763d39fe8d630a55b50340c32d23a126ae636131c33b4e4c5bd0656e198
-
SSDEEP
384:TR5mgCdgZys8QWoQgktolLd9Hh/lmM2SgUnLYfF2MfwqHKJ+:TjTCdgZys8roQvolLrB/8Ua92Jpg
Malware Config
Signatures
-
Njrat family
Files
-
3ef0418afacad8b3e9cb5d55f8d4d6d8eb6b03b03d1919a8ad114c048a32aa46.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ