Behavioral task
behavioral1
Sample
f92ba9ee6557729cd10ecf39309656c92430adbe44b2f8846718fd6c3a7f6b76.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f92ba9ee6557729cd10ecf39309656c92430adbe44b2f8846718fd6c3a7f6b76.exe
Resource
win10v2004-20221111-en
General
-
Target
f92ba9ee6557729cd10ecf39309656c92430adbe44b2f8846718fd6c3a7f6b76
-
Size
108KB
-
MD5
3f093d8d048a12f3624fa04a94c4db1c
-
SHA1
1db63eac595c764dd5c9e8e628c9e62f866e26e5
-
SHA256
f92ba9ee6557729cd10ecf39309656c92430adbe44b2f8846718fd6c3a7f6b76
-
SHA512
f5a72fa4dfac83e7a2186a84e445074c656fbba7d35d93cd90c1b5f5e86f731eff64c41289d041193fd62662f5b6f2bbedbd3d6316360f4004a892ba7d237d4d
-
SSDEEP
1536:6C7bcfsbgxwvFahJKTLKRMp41VPmuvQbDJZp9iXp3qB40qnFT0:d9bgxwdahMLkYmmpblZp9iZv0qn
Malware Config
Signatures
-
Njrat family
Files
-
f92ba9ee6557729cd10ecf39309656c92430adbe44b2f8846718fd6c3a7f6b76.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 84KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ