Behavioral task
behavioral1
Sample
be6e7907530c1da198f1905a97a0f63cccb4b06784602cc82c2bcc1245df16d9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
be6e7907530c1da198f1905a97a0f63cccb4b06784602cc82c2bcc1245df16d9.exe
Resource
win10v2004-20220812-en
General
-
Target
be6e7907530c1da198f1905a97a0f63cccb4b06784602cc82c2bcc1245df16d9
-
Size
256KB
-
MD5
53382b3d67ce8aa49f78a8bf1371bf75
-
SHA1
382aa5314288828ef0ae6d2c7ca3ffe6f1ef4503
-
SHA256
be6e7907530c1da198f1905a97a0f63cccb4b06784602cc82c2bcc1245df16d9
-
SHA512
5eded8abcca5ba5908c8de55735a67577d5506145771acad8d9d22cc885681155241f5c92520767301bcc85fbcb91d119792fe8928c6ab47728815a9d77030ae
-
SSDEEP
3072:ydEqjmnOymoYSA29MAWPJ5nKJ4WJ2rtVgvls2AJrV5Lfq/q2YKzZRV5Oj:LgHpM9evkxwJrV5LfgYKFn5
Malware Config
Signatures
-
Njrat family
Files
-
be6e7907530c1da198f1905a97a0f63cccb4b06784602cc82c2bcc1245df16d9.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 180KB - Virtual size: 179KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ