Behavioral task
behavioral1
Sample
4e2dfbaaac852bf625cf0db0439e58c9db549cc74e7847d450d7f99bdba0f92a.exe
Resource
win7-20221111-en
General
-
Target
4e2dfbaaac852bf625cf0db0439e58c9db549cc74e7847d450d7f99bdba0f92a
-
Size
180KB
-
MD5
d15b3b20841ba55fc6ac6a2867a4e9d7
-
SHA1
f36749af443ed6ab5d5f9de7ad6bf235e9a82fc8
-
SHA256
4e2dfbaaac852bf625cf0db0439e58c9db549cc74e7847d450d7f99bdba0f92a
-
SHA512
7f2f078bc786145737e337dff592dc3de34eab310c7a620749962496fa4001a4e6d0af74c4d60b5b09616169a86484c2e206e0b5055211979289894b1738b02d
-
SSDEEP
3072:nj72AMfbhmBRQeA29o6yd8Wf7zCMW9iaIkZh2fb5jFGn:njd8mBRV9o3dJf7zW1vr2fb5jFG
Malware Config
Signatures
-
Njrat family
Files
-
4e2dfbaaac852bf625cf0db0439e58c9db549cc74e7847d450d7f99bdba0f92a.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 108KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ