Behavioral task
behavioral1
Sample
6aae4ca9350dfcbc92573a73eab3be56725aceef0c4d6f880f44009976ea613c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6aae4ca9350dfcbc92573a73eab3be56725aceef0c4d6f880f44009976ea613c.exe
Resource
win10v2004-20220901-en
General
-
Target
6aae4ca9350dfcbc92573a73eab3be56725aceef0c4d6f880f44009976ea613c
-
Size
116KB
-
MD5
ffd0159816163caa61b04e6de508f5fa
-
SHA1
448bc76f3695d15e71162f3a7eccfa6ac97eef8d
-
SHA256
6aae4ca9350dfcbc92573a73eab3be56725aceef0c4d6f880f44009976ea613c
-
SHA512
4bb2b0d24cc4f20654a936ed36d3ac94a9492bcd04c0b13efa8e9fd1f34ed6438865c738631dd48a0ef1420e46901259155f56234748e15d99b9d50d4c48457e
-
SSDEEP
3072:aghfdtWeOWdO8Idcwb0lG2jdGENbeLyFFL10c3wVj:tstWdOn2jFNbe+DCc3w1
Malware Config
Signatures
-
Njrat family
Files
-
6aae4ca9350dfcbc92573a73eab3be56725aceef0c4d6f880f44009976ea613c.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ