Behavioral task
behavioral1
Sample
34583601e853e9d63d929978b7cce31e739ffef74c34e390f0c58574dc2cf533.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
34583601e853e9d63d929978b7cce31e739ffef74c34e390f0c58574dc2cf533.exe
Resource
win10v2004-20220901-en
General
-
Target
34583601e853e9d63d929978b7cce31e739ffef74c34e390f0c58574dc2cf533
-
Size
259KB
-
MD5
07f03cbccf09a1529095ae024e2c73f4
-
SHA1
e92f2c0053067d1bbbab5c1aea72ad36d444155f
-
SHA256
34583601e853e9d63d929978b7cce31e739ffef74c34e390f0c58574dc2cf533
-
SHA512
e3820b2c51268495f018ac2f6e564a3f4767dbcbef179c863833f0f41d02ada4993a109328fedffadc2c4352e0cb000f5b6d1aff74840d738c390d49369307eb
-
SSDEEP
3072:Qu97z3bB/RGdGeAFL2WY4lKdTdjCEz/MHwPYEGhHfz4m97ym2e+YOktX7JM6vVNy:PjA1A924lKdT4Ez/IwPYv7yUbqOvy
Malware Config
Signatures
-
Njrat family
Files
-
34583601e853e9d63d929978b7cce31e739ffef74c34e390f0c58574dc2cf533.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 208KB - Virtual size: 207KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ