Behavioral task
behavioral1
Sample
abbe353f09ac23be86640e16af1b4244f601a2461768ef3ceda76e71cad3e293.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
abbe353f09ac23be86640e16af1b4244f601a2461768ef3ceda76e71cad3e293.exe
Resource
win10v2004-20221111-en
General
-
Target
abbe353f09ac23be86640e16af1b4244f601a2461768ef3ceda76e71cad3e293
-
Size
204KB
-
MD5
e8c9806faae153238ca0bae8fa247ba5
-
SHA1
bee860c84f4e11215b1539373dd29aa6c062e71d
-
SHA256
abbe353f09ac23be86640e16af1b4244f601a2461768ef3ceda76e71cad3e293
-
SHA512
66cee2a8ec14039aaa7b6c1b48f839f10879ab07001e740d1187a896c8e2af554659b06514c677b5dabbdabd5d35b94db149a50125e24613a2fba6a173887c1b
-
SSDEEP
3072:US680+GweUySk53geftLa72tsNR4JenPIQlokhK:glUlehRS/wQokh
Malware Config
Signatures
-
Njrat family
Files
-
abbe353f09ac23be86640e16af1b4244f601a2461768ef3ceda76e71cad3e293.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 160KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ