Behavioral task
behavioral1
Sample
4285f839f8a038cb1147e0518c201a0df28013c2b2f9572f7df799fcc55fd59a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4285f839f8a038cb1147e0518c201a0df28013c2b2f9572f7df799fcc55fd59a.exe
Resource
win10v2004-20220812-en
General
-
Target
4285f839f8a038cb1147e0518c201a0df28013c2b2f9572f7df799fcc55fd59a
-
Size
154KB
-
MD5
7215788ae49c598cc647876f3af54f00
-
SHA1
aefa9dea9b17bcd5fe542ec2c1429a2cc23d5224
-
SHA256
4285f839f8a038cb1147e0518c201a0df28013c2b2f9572f7df799fcc55fd59a
-
SHA512
a6a40de1c46e63fc502908153ad7db26781fdc8b76990ca1cf672f44ee23d0d84e565bded50e56f254711e52f5ea08f58e4ba1b57085b4dfbbe3605233528e5e
-
SSDEEP
3072:84xoXUY3JFslZmwPSYKA29Ez0hRAmvF+f1:84xQ3JJwS9Ec+f
Malware Config
Signatures
-
Njrat family
Files
-
4285f839f8a038cb1147e0518c201a0df28013c2b2f9572f7df799fcc55fd59a.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ