Behavioral task
behavioral1
Sample
ca9f24730a1c115285e16bd37d35d4afb0709198ffb11cbae907278ccc9e9979.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ca9f24730a1c115285e16bd37d35d4afb0709198ffb11cbae907278ccc9e9979.exe
Resource
win10v2004-20220901-en
General
-
Target
ca9f24730a1c115285e16bd37d35d4afb0709198ffb11cbae907278ccc9e9979
-
Size
232KB
-
MD5
b6788fcf536f9fa2ff42b3be50828d9e
-
SHA1
e6f4a0773aa6d12cfa287bfeed4e37730e8f75eb
-
SHA256
ca9f24730a1c115285e16bd37d35d4afb0709198ffb11cbae907278ccc9e9979
-
SHA512
2e07c9e678553f7fa377068399f64668f2914bb287ecc1d520d652ca7833abd94ce78d4606e5f9a7699d607a965d808404edba730a9eb94222b493d468262e45
-
SSDEEP
3072:xnYRA290ccmgsbIUMrr5fbG9IJk1hwckuY+70oXRx4VwDXHAxoKRMyi+uZDE:E9PcBFr5i38ViHJUbuZo
Malware Config
Signatures
-
Njrat family
Files
-
ca9f24730a1c115285e16bd37d35d4afb0709198ffb11cbae907278ccc9e9979.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 172KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ