Behavioral task
behavioral1
Sample
ad0b3d33285aefa9b1df8c92f3a6399122dc4c2df12dfbda05259f5d62ad1709.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ad0b3d33285aefa9b1df8c92f3a6399122dc4c2df12dfbda05259f5d62ad1709.exe
Resource
win10v2004-20220812-en
General
-
Target
ad0b3d33285aefa9b1df8c92f3a6399122dc4c2df12dfbda05259f5d62ad1709
-
Size
68KB
-
MD5
a00782360dd0e96cbfc9c02fc5cce050
-
SHA1
610ef73bbabd0be6bb4a28e484fe5516d4a41118
-
SHA256
ad0b3d33285aefa9b1df8c92f3a6399122dc4c2df12dfbda05259f5d62ad1709
-
SHA512
ed7d6953da82846776819b7467a7d294067fbc03d0619a7bc6f827ef18dfd8e557403c5490acc09b4d151b34d3dcee28185ca464a03d8f43258beca1c3dc1f7d
-
SSDEEP
1536:JO6L+A0YnYlD9aAdVFzJah1//G96t9we88P6:RKA0WYlD9aAdVFN01/+9a9NF
Malware Config
Signatures
-
Njrat family
Files
-
ad0b3d33285aefa9b1df8c92f3a6399122dc4c2df12dfbda05259f5d62ad1709.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 177B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ