Behavioral task
behavioral1
Sample
cefce2140fa83be9404af25c4a9445b1fc58a7800adea4a28d5c08e4f1978bff.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cefce2140fa83be9404af25c4a9445b1fc58a7800adea4a28d5c08e4f1978bff.exe
Resource
win10v2004-20220812-en
General
-
Target
cefce2140fa83be9404af25c4a9445b1fc58a7800adea4a28d5c08e4f1978bff
-
Size
33KB
-
MD5
1fe1548a0c6419a0257526a149007f20
-
SHA1
f9428d52110344b19827d81d7c343d58d9488514
-
SHA256
cefce2140fa83be9404af25c4a9445b1fc58a7800adea4a28d5c08e4f1978bff
-
SHA512
862a2f9cfb620e59b2745323888824695390f81e158ecc7ffd68145b794ceb46f2778d0d32524be5869e7bf142ec5aa6fafc803424fa15f0b7f2a4ad620694dd
-
SSDEEP
768:2DOCOjWaZLd6+lTvSMiYXbM5Gcx717Fp2Sg6cD:ZRZLdfvSMioMAcxZFp2X6cD
Malware Config
Signatures
-
Njrat family
Files
-
cefce2140fa83be9404af25c4a9445b1fc58a7800adea4a28d5c08e4f1978bff.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ