Behavioral task
behavioral1
Sample
1465a73a0fad4bd15933545c9867fd3983264789f77518838d4a361953ed3d9e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1465a73a0fad4bd15933545c9867fd3983264789f77518838d4a361953ed3d9e.exe
Resource
win10v2004-20221111-en
General
-
Target
1465a73a0fad4bd15933545c9867fd3983264789f77518838d4a361953ed3d9e
-
Size
204KB
-
MD5
a61361872990e3673eb61b624a94b628
-
SHA1
4512f5624540c96899f10bd0463fd2ae537e6224
-
SHA256
1465a73a0fad4bd15933545c9867fd3983264789f77518838d4a361953ed3d9e
-
SHA512
17a9afee76896c38b227c4bf22d1a2470788785b34d83a41dc25986d6429eda140ca67d4c6d7d80c6821f722e13283f5a1936867e2233848cf42ed187bf67c59
-
SSDEEP
3072:FweUySPS680+C4WodY4rrw00dpJaa4ql5toHqzJe/dAfdg0:FlUoWoijdfjo
Malware Config
Signatures
-
Njrat family
Files
-
1465a73a0fad4bd15933545c9867fd3983264789f77518838d4a361953ed3d9e.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 160KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ