Behavioral task
behavioral1
Sample
2b99244ee17d2dbbeaf984bc59d43e98.exe
Resource
win7-20220812-en
General
-
Target
2b99244ee17d2dbbeaf984bc59d43e98.exe
-
Size
22KB
-
MD5
2b99244ee17d2dbbeaf984bc59d43e98
-
SHA1
8e648223ca4e86d7df4184bcc0615f7acb7afa3e
-
SHA256
41999888f66ebb89722268f5857cb23d3abcc3b68aea0286ddef0074fc1de8bf
-
SHA512
eabb957159480b32412a16926cf4d0a3becc41236be96dc2e3f15495fb9e56f1f83417c31f13d9bfde9477b0dc4872a28807cc94099a1cdfb417605477235f26
-
SSDEEP
384:/Ov7R9a738QbdUVCAdLdtF5g884YCbihSj/th3MRA0uuToEGC5Is:GTRM73nzAdLdtFOIbzPU0EGCt
Malware Config
Signatures
-
Njrat family
Files
-
2b99244ee17d2dbbeaf984bc59d43e98.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 684B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ