Behavioral task
behavioral1
Sample
d68b191ef68164b1e8be3831cfec4f19b5c9ced83ff43bfa448ea62b03d2c5e0.exe
Resource
win7-20221111-en
General
-
Target
d68b191ef68164b1e8be3831cfec4f19b5c9ced83ff43bfa448ea62b03d2c5e0
-
Size
236KB
-
MD5
43f8bc06a5750c096c6c1c36b6a85de0
-
SHA1
a7a8eb7ca34459b0c876658f94d314784e55fa02
-
SHA256
d68b191ef68164b1e8be3831cfec4f19b5c9ced83ff43bfa448ea62b03d2c5e0
-
SHA512
63ba85bc83c692dca961f4f9b8c6ff97073f26d36e6f2756980ba6e9af3c88d23f08d64db90b0f817d5150c15a3461141917df2687524074760982e7d69000ee
-
SSDEEP
6144:Mqj9P5gdINejBDJSbBF3+pIQ5BMB6SNcqUQQ:f5WI8jBDJGBZ+pBBSNnRQ
Malware Config
Signatures
-
Njrat family
Files
-
d68b191ef68164b1e8be3831cfec4f19b5c9ced83ff43bfa448ea62b03d2c5e0.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 152KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ