Behavioral task
behavioral1
Sample
e333821cb51b48d9622d5a6fc32e28bfcde2253502c1385f64951d049f218b50.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e333821cb51b48d9622d5a6fc32e28bfcde2253502c1385f64951d049f218b50.exe
Resource
win10v2004-20220812-en
General
-
Target
e333821cb51b48d9622d5a6fc32e28bfcde2253502c1385f64951d049f218b50
-
Size
37KB
-
MD5
d5cdc640afaa7b27b9169f51fe7bb996
-
SHA1
c50b926d07e2572bcaa34e503670b16c2b0cae58
-
SHA256
e333821cb51b48d9622d5a6fc32e28bfcde2253502c1385f64951d049f218b50
-
SHA512
d124317474c1104bf698a5328cf388bc529e2a7b7f169d6b66b2f95f8e882f59950a66930316e8069b16e84e1749f93d80fce79df115af48bc3c57520658a682
-
SSDEEP
768:9oNRX4PwvhKuFFCWwsQ98FMlNSS9L6VqQrunP0/zAlCF3:9A4qhKuFFCRhz9L6VHE2z7
Malware Config
Signatures
-
Njrat family
Files
-
e333821cb51b48d9622d5a6fc32e28bfcde2253502c1385f64951d049f218b50.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ