Behavioral task
behavioral1
Sample
c00462f0469496f889068f31ad59bfaaa167cb04e70e2012a86c124490928dfc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c00462f0469496f889068f31ad59bfaaa167cb04e70e2012a86c124490928dfc.exe
Resource
win10v2004-20220812-en
General
-
Target
c00462f0469496f889068f31ad59bfaaa167cb04e70e2012a86c124490928dfc
-
Size
137KB
-
MD5
4d31db27dfbe5013c3f81899e3f26970
-
SHA1
1055be15e00349b95ac4e4ddbf3683807ec0be4f
-
SHA256
c00462f0469496f889068f31ad59bfaaa167cb04e70e2012a86c124490928dfc
-
SHA512
ab86a16dacc10dee158d3c0650aaadca2fb1e4933e5a29ba62e9f29ded02cd87e0497e7df5a19c18a4197cb543f1c354864ea12d8f51faaafeda600850d4cac3
-
SSDEEP
1536:4GDrcYNu7HsTlQ0McRP2FUDlTeuRgkRmGmqx6khHOnf295IGVZzIu6eHwGdbYTmR:91228ixx6kJOf659VlIuFvbzYY0R2t3
Malware Config
Signatures
-
Njrat family
Files
-
c00462f0469496f889068f31ad59bfaaa167cb04e70e2012a86c124490928dfc.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 135KB - Virtual size: 135KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 571B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ