Behavioral task
behavioral1
Sample
50733256ffe3c6b9dac47152b77bf2710854f6cf7929132febfdc8849eebf032.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
50733256ffe3c6b9dac47152b77bf2710854f6cf7929132febfdc8849eebf032.exe
Resource
win10v2004-20220901-en
General
-
Target
50733256ffe3c6b9dac47152b77bf2710854f6cf7929132febfdc8849eebf032
-
Size
544KB
-
MD5
93582da1c3139d604f9d21def1bc14e0
-
SHA1
27f653a5d9cc33969f09b768a8f81d26ed8ec8f6
-
SHA256
50733256ffe3c6b9dac47152b77bf2710854f6cf7929132febfdc8849eebf032
-
SHA512
7f49b74979711319371fbbf8052f90794258c423329a743020ffcf53f923500aabb1aca8c9be87da6a3d12686c52af484334d3514a2ff8ca058f8371f89c0d5d
-
SSDEEP
12288:l9b+k+5sY1TscSaqmGRkzikqVh6TKrRF1tlGLQ1LWMtIyNV81B:fxp+YkGWrqhRl2Q1wyNyB
Malware Config
Signatures
-
Njrat family
Files
-
50733256ffe3c6b9dac47152b77bf2710854f6cf7929132febfdc8849eebf032.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 520KB - Virtual size: 518KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ