Behavioral task
behavioral1
Sample
0a770b13290bd6f79d19972bb5f32fbcc4047dd70b3aea2531e84cb7efcaa355.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0a770b13290bd6f79d19972bb5f32fbcc4047dd70b3aea2531e84cb7efcaa355.exe
Resource
win10v2004-20220812-en
General
-
Target
0a770b13290bd6f79d19972bb5f32fbcc4047dd70b3aea2531e84cb7efcaa355
-
Size
29KB
-
MD5
a43c25f3b94e34683dfab8437933d9ec
-
SHA1
982951db7fb8330018666d4b755bd28fedf64009
-
SHA256
0a770b13290bd6f79d19972bb5f32fbcc4047dd70b3aea2531e84cb7efcaa355
-
SHA512
ecab761d4d4653644d98e4192018df08043b29287b667b04bc01bedc48735f28507905748d877dd30c51eb43a635e4221dc5fe27f980e86ea6fc98bafa70cb24
-
SSDEEP
384:TleCrSCdi6IL9mirNgfoDgk7olv4RRfdM2XgUnLYfF2MfwSHKGocfwt6J:TIxCdi6IL9yfoDtolwb1Ja92JhGox
Malware Config
Signatures
-
Njrat family
Files
-
0a770b13290bd6f79d19972bb5f32fbcc4047dd70b3aea2531e84cb7efcaa355.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ