Behavioral task
behavioral1
Sample
c86a05a21bdb20d9ba287184ee2f76d8e0143b0889b58abfed4a277c80c44d95.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c86a05a21bdb20d9ba287184ee2f76d8e0143b0889b58abfed4a277c80c44d95.exe
Resource
win10v2004-20221111-en
General
-
Target
c86a05a21bdb20d9ba287184ee2f76d8e0143b0889b58abfed4a277c80c44d95
-
Size
309KB
-
MD5
643feb202e73f5fc5fc10e93a3eb49a9
-
SHA1
6db787334c376c95220150ef8df786c0e8a80261
-
SHA256
c86a05a21bdb20d9ba287184ee2f76d8e0143b0889b58abfed4a277c80c44d95
-
SHA512
94a1accf9e67a7f84638e8bb55afa08d0f587b990893a6f652011167c48c39c4eda4fa3899a04f8569fb6eef529dd9e841bc5588c2ae8722da38bffc93dd8180
-
SSDEEP
6144:Bih687blzuBx4RAaaUW6KhbQn7E5NHKZRb:B+1Ox2wULe0Ci
Malware Config
Signatures
-
Njrat family
Files
-
c86a05a21bdb20d9ba287184ee2f76d8e0143b0889b58abfed4a277c80c44d95.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 275KB - Virtual size: 275KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ