Behavioral task
behavioral1
Sample
893f935e22e119f62be7ffae78e86e768b4905d22e2e79d6fc612c8284fb8595.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
893f935e22e119f62be7ffae78e86e768b4905d22e2e79d6fc612c8284fb8595.exe
Resource
win10v2004-20220812-en
General
-
Target
893f935e22e119f62be7ffae78e86e768b4905d22e2e79d6fc612c8284fb8595
-
Size
125KB
-
MD5
76c0676f73feb8c5e1d8b4a29d905330
-
SHA1
f8b8482f9790c0977ec2fc2c06d3f72610baff7a
-
SHA256
893f935e22e119f62be7ffae78e86e768b4905d22e2e79d6fc612c8284fb8595
-
SHA512
b862f7834d35b7e0688b4451673d26aee9b1ce85f1fe39917ef967be699e5faa3af7bd2052c8aad27fe6e3e54ba989420263d04a7680e0a136c0873a3dd17871
-
SSDEEP
1536:+T5Bs8WmH+UNkQROx4eAlN1PdNYpbgfUxSyxoUX3DYo9G1f62U+d+K18F920Rf:z8RN0x4eAlNprU9X38o9GU2U+cKP0
Malware Config
Signatures
-
Njrat family
Files
-
893f935e22e119f62be7ffae78e86e768b4905d22e2e79d6fc612c8284fb8595.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 123KB - Virtual size: 123KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ