Behavioral task
behavioral1
Sample
b01fa835a91259bc48b0c29292a3bcb70932136c76585b256897ba2e12c99eea.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b01fa835a91259bc48b0c29292a3bcb70932136c76585b256897ba2e12c99eea.dll
Resource
win10v2004-20220901-en
General
-
Target
b01fa835a91259bc48b0c29292a3bcb70932136c76585b256897ba2e12c99eea
-
Size
66KB
-
MD5
96a093f07c66a73b2f2632f04682c360
-
SHA1
ba62fb505bbff9abb6a6d7cf8825ccada2caf4ad
-
SHA256
b01fa835a91259bc48b0c29292a3bcb70932136c76585b256897ba2e12c99eea
-
SHA512
4dac9d5da2b4973d9aa5c3099c2c756f6f0d0d4f49a5db3621ba3ca74984b82ea8fb524ad6083df0285c4db666b9fc74c3755bc8a152468f54d5286c701a7a68
-
SSDEEP
1536:I95mXSQP1rSiVxDgSQ1rbi8TPaFp2X6cs3t0OA8F:IfYpZVxDgSQg8baWX6cSt2
Malware Config
Signatures
-
Njrat family
Files
-
b01fa835a91259bc48b0c29292a3bcb70932136c76585b256897ba2e12c99eea.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ