Behavioral task
behavioral1
Sample
ec0b947ffab70b1e8c20379fd0727c811522554f87ff3e15b9a8b2b081e6aaba.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ec0b947ffab70b1e8c20379fd0727c811522554f87ff3e15b9a8b2b081e6aaba.exe
Resource
win10v2004-20220812-en
General
-
Target
ec0b947ffab70b1e8c20379fd0727c811522554f87ff3e15b9a8b2b081e6aaba
-
Size
41KB
-
MD5
9108655d8929d56333293d59f47c46f0
-
SHA1
a066a392c38390ad0460daec280e8549db977b32
-
SHA256
ec0b947ffab70b1e8c20379fd0727c811522554f87ff3e15b9a8b2b081e6aaba
-
SHA512
bb3a0273b60fd166f5c3adc3a1919917be71e04d6278b9465d1f3d9dbfa50cbdd89da5021e1110e8c05e6221d3394d658420741526ffe0adbcde74c023408669
-
SSDEEP
768:iRARn7uE30q368UHP7Sf8DIlsmsfb0rHR7Fp2SC6c:iUpBq7v7Sf8DSsfsHxFp2t6c
Malware Config
Signatures
-
Njrat family
Files
-
ec0b947ffab70b1e8c20379fd0727c811522554f87ff3e15b9a8b2b081e6aaba.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ