Static task
static1
Behavioral task
behavioral1
Sample
d6f7c6720ba9fa9641906eee74098fc4bc825ac216d95f738a2fa51cf3c00384.exe
Resource
win7-en-20211208
General
-
Target
d6f7c6720ba9fa9641906eee74098fc4bc825ac216d95f738a2fa51cf3c00384
-
Size
28KB
-
MD5
2a87896e592dd168cad17b3ebcee6121
-
SHA1
af4e6d67ed5bf0434672735aa3946437bbcb1450
-
SHA256
d6f7c6720ba9fa9641906eee74098fc4bc825ac216d95f738a2fa51cf3c00384
-
SHA512
2812622744901f2fd8a9150caa8f576e18d56497a3e04c29954d5939d64cb6a297f52b1beac76be28176ec7bd5a5f787874b850ed23305f2ce6a9ed41060c307
-
SSDEEP
384:W8Lrd3IHU3T5rPrMnl5SSoDv1QtGltMHKLD5Z1Ha0LE2q155GkbiGvxwrrhMJDv:5k5SpDNQwltMqLFHa0LIbnb8
Malware Config
Signatures
-
Njrat family
Files
-
d6f7c6720ba9fa9641906eee74098fc4bc825ac216d95f738a2fa51cf3c00384.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ