Behavioral task
behavioral1
Sample
329a98d9e21c8d597c3d93526d5f9aa16ff99041090f9266fd83024888eb1a2f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
329a98d9e21c8d597c3d93526d5f9aa16ff99041090f9266fd83024888eb1a2f.exe
Resource
win10v2004-20220901-en
General
-
Target
329a98d9e21c8d597c3d93526d5f9aa16ff99041090f9266fd83024888eb1a2f
-
Size
28KB
-
MD5
81f1020801b856885bbb48dbd51a93b0
-
SHA1
0733bf507731a642a82759dffc79817876d6ed17
-
SHA256
329a98d9e21c8d597c3d93526d5f9aa16ff99041090f9266fd83024888eb1a2f
-
SHA512
bb1d80957931f5258dffbb16283fb1bc431a6713d9f6c55c5d6d39e321575797b45ece4e3c753652399285375de4fb13b3b0bae6f03d82227b66f09dd75fe97e
-
SSDEEP
384:RPjeGjS41fyKrSsaNy0mZOxlFquUjh0fZ/wXQXXDILDVw4Z6Ks0LE2Rgcbiifxwp:Rzf6/gKloDVw4rs0LQcbKkiB
Malware Config
Signatures
-
Njrat family
Files
-
329a98d9e21c8d597c3d93526d5f9aa16ff99041090f9266fd83024888eb1a2f.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ