Behavioral task
behavioral1
Sample
f32be8a05b9559343166e3d3abf2a01105d65967db38445a4c2c6f74d5a542c9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f32be8a05b9559343166e3d3abf2a01105d65967db38445a4c2c6f74d5a542c9.exe
Resource
win10v2004-20220812-en
General
-
Target
f32be8a05b9559343166e3d3abf2a01105d65967db38445a4c2c6f74d5a542c9
-
Size
148KB
-
MD5
02eb85d28ab047b08a558a5d09d25790
-
SHA1
f2e98fd13462014e35c17ab48b7bc7adbb8ebc2a
-
SHA256
f32be8a05b9559343166e3d3abf2a01105d65967db38445a4c2c6f74d5a542c9
-
SHA512
b18840abd29373321bdf26a3cf9a5ee4712f5c6bb0e5be5e4a9fbb43bb0685fed11de3cd51ede9df4c7fbbf40e7b324af924b8d03fa7677a8da218364a88f315
-
SSDEEP
3072:Ed9EVA1CLa8JDBVh1JhA2AnR7ahR3G2U2ml0:1DJTAnRk3G2U2ml
Malware Config
Signatures
-
Njrat family
Files
-
f32be8a05b9559343166e3d3abf2a01105d65967db38445a4c2c6f74d5a542c9.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 146KB - Virtual size: 146KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 571B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ