Behavioral task
behavioral1
Sample
a70efe4872db2b982747838d40ded4f2200db7afb261a80dbb34ec91ae398821.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a70efe4872db2b982747838d40ded4f2200db7afb261a80dbb34ec91ae398821.dll
Resource
win10v2004-20220812-en
General
-
Target
a70efe4872db2b982747838d40ded4f2200db7afb261a80dbb34ec91ae398821
-
Size
52KB
-
MD5
01514739790381ff306d34223a7a1940
-
SHA1
987d3f9187817b3e902a050653fa7b2b0f8ca38a
-
SHA256
a70efe4872db2b982747838d40ded4f2200db7afb261a80dbb34ec91ae398821
-
SHA512
988f3726b58cacb4ab5ff47b7ef526d7463b0fb206522e28943e55e0e3a58f1379f3a893f6c9ba00a569cd744a5351599dfe85bf9b56f895374c43c27b900c43
-
SSDEEP
768:iOC2u75oa4fu124A16jXeJBKh0p29SgRoVY6xOA82qLhmyN+:iL75CPcj8KhG29joVY0OA8F
Malware Config
Signatures
-
Njrat family
Files
-
a70efe4872db2b982747838d40ded4f2200db7afb261a80dbb34ec91ae398821.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ