Behavioral task
behavioral1
Sample
31593f1730a2e44471ed9c5d2bf87438399349f49cf70d0cfb8813cfedfd2c0d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
31593f1730a2e44471ed9c5d2bf87438399349f49cf70d0cfb8813cfedfd2c0d.exe
Resource
win10v2004-20220812-en
General
-
Target
31593f1730a2e44471ed9c5d2bf87438399349f49cf70d0cfb8813cfedfd2c0d
-
Size
33KB
-
MD5
26c13d5b2a3632f728a647f95b61a6d0
-
SHA1
056646525d1e134775c77b35a95a0e0c00e45108
-
SHA256
31593f1730a2e44471ed9c5d2bf87438399349f49cf70d0cfb8813cfedfd2c0d
-
SHA512
7c5bbfecdbd9824ecc79abefc81cd17178be765ed0433fa439800df07ee9a9c171b7a8f36a4b53cb03511500eba4bdcc048831877c73853bce6480d4947b3194
-
SSDEEP
768:ZzO5On5hxbuUrgfhiqCwSSp6Kr8r3PE7Fp2Sg6crq:HjxbuogfewSSp6i8TPUFp2X6cr
Malware Config
Signatures
-
Njrat family
Files
-
31593f1730a2e44471ed9c5d2bf87438399349f49cf70d0cfb8813cfedfd2c0d.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ