Behavioral task
behavioral1
Sample
6e172eceb80a6f5684f2a1a144bdd4a869ab9429de0490f8ab187462e46a06b2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6e172eceb80a6f5684f2a1a144bdd4a869ab9429de0490f8ab187462e46a06b2.exe
Resource
win10v2004-20221111-en
General
-
Target
6e172eceb80a6f5684f2a1a144bdd4a869ab9429de0490f8ab187462e46a06b2
-
Size
472KB
-
MD5
830b15da953bdbf8105474e93876ac9c
-
SHA1
2e0e49d48644c244e097c4418f1a6c801b9d7805
-
SHA256
6e172eceb80a6f5684f2a1a144bdd4a869ab9429de0490f8ab187462e46a06b2
-
SHA512
d7260f5f2d7985e3ca4a0783c5c9ff9c5bca8fdd64a0a47a27b9fc2d1c7cbf8bcb5e45b1542fd068dc90cf73a6967b899b53e106314ca5c964c8ad6cae97faf2
-
SSDEEP
12288:zawtBYX/Xb9X5/yLy7n9LnX+gtV8wAeOQKNKKKKKKKKKKKKKKKKKuKKKKKeKKKK7:FtB8/Xb9X5cyRLX+UVxAeOQKNKKKKKKn
Malware Config
Signatures
-
Njrat family
Files
-
6e172eceb80a6f5684f2a1a144bdd4a869ab9429de0490f8ab187462e46a06b2.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 348KB - Virtual size: 347KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ