Behavioral task
behavioral1
Sample
ee4aa75af69f05b277d98e71e0fd9fcb3c5e4590602f6a543c4620f3da6a9eaf.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ee4aa75af69f05b277d98e71e0fd9fcb3c5e4590602f6a543c4620f3da6a9eaf.exe
Resource
win10v2004-20221111-en
General
-
Target
ee4aa75af69f05b277d98e71e0fd9fcb3c5e4590602f6a543c4620f3da6a9eaf
-
Size
52KB
-
MD5
81a33aad7093715f9c99af3ebd647c45
-
SHA1
b87d2abab6de7b9fc08bc1dac5236318f3d3181d
-
SHA256
ee4aa75af69f05b277d98e71e0fd9fcb3c5e4590602f6a543c4620f3da6a9eaf
-
SHA512
ffecd760eb670e03023943e18a0f6c746e409122497241595f5a2f409def873fc614b6e9b41b7d6c551e8c3c78a56628b9ae62331bb9c416546a3b4897b084d3
-
SSDEEP
1536:82sjMJCdqw04hNoaot692Jb2RDfibqLqkSZZZ3W:82sz2/JaRDqb0UW
Malware Config
Signatures
-
Njrat family
Files
-
ee4aa75af69f05b277d98e71e0fd9fcb3c5e4590602f6a543c4620f3da6a9eaf.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ