Behavioral task
behavioral1
Sample
9ca1c1f416953ef9d07d678be57c13c9e1cb5ced89cef3d288d34b1a88a8ff35.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9ca1c1f416953ef9d07d678be57c13c9e1cb5ced89cef3d288d34b1a88a8ff35.exe
Resource
win10v2004-20220812-en
General
-
Target
9ca1c1f416953ef9d07d678be57c13c9e1cb5ced89cef3d288d34b1a88a8ff35
-
Size
28KB
-
MD5
a4c35961f64c6b73631f63de3aadb1da
-
SHA1
a73096fef054bc76aaa5b2db5a44ae57b89805d3
-
SHA256
9ca1c1f416953ef9d07d678be57c13c9e1cb5ced89cef3d288d34b1a88a8ff35
-
SHA512
5ed36b5fb814096e6fa1ac890b7eb08e967710673afc3c6a1772873e4d93dada8dca726976a60a5c5eff101bbe146cf5017d3576aaad2db9592ded07a70fdbfa
-
SSDEEP
384:e7TxzZQn+1TsgAnxKu6ylF8Xr4KVI8v3MHfE8t7aX5z0LE2mavbilMxwoPEOIEnz:enVeOsglnrZvifR7aZ0LI2bQS
Malware Config
Signatures
-
Njrat family
Files
-
9ca1c1f416953ef9d07d678be57c13c9e1cb5ced89cef3d288d34b1a88a8ff35.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ