Behavioral task
behavioral1
Sample
2a7873051114cd0835c7cefd0d75d3add290941fe6331504eababeec7fb04780.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2a7873051114cd0835c7cefd0d75d3add290941fe6331504eababeec7fb04780.exe
Resource
win10v2004-20220812-en
General
-
Target
2a7873051114cd0835c7cefd0d75d3add290941fe6331504eababeec7fb04780
-
Size
26KB
-
MD5
538c276a2b498870b892a9c649242890
-
SHA1
2a48f06d1643beb98a31476106297f8bfd41e757
-
SHA256
2a7873051114cd0835c7cefd0d75d3add290941fe6331504eababeec7fb04780
-
SHA512
625a43c7e4360396b93fe0f47fda9f3e34b2e1a303868eb6bb452b52da674fef75abdb455aeb5d9a94afaa902107003e5167a62d9ec2b569cadefd9168b92003
-
SSDEEP
384:6/WCTQ5RGXEgHP+oVKRRswCXaVIC92HBVRC29MGljSnUlQCVvO:xT5RTxoVKvsZ6IfHBlNSQ/Vv
Malware Config
Signatures
-
Njrat family
Files
-
2a7873051114cd0835c7cefd0d75d3add290941fe6331504eababeec7fb04780.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ