Behavioral task
behavioral1
Sample
ba005dfa1567d9782703ee11becc81dca1132b18a055a366e5eb144ec491cffe.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ba005dfa1567d9782703ee11becc81dca1132b18a055a366e5eb144ec491cffe.exe
Resource
win10v2004-20220901-en
General
-
Target
ba005dfa1567d9782703ee11becc81dca1132b18a055a366e5eb144ec491cffe
-
Size
80KB
-
MD5
5f3745f9ced17a40e94e9cbd6de7cbaa
-
SHA1
1be541c8d21e8d7244a5096885fc23559782d927
-
SHA256
ba005dfa1567d9782703ee11becc81dca1132b18a055a366e5eb144ec491cffe
-
SHA512
4484add200cd87f40daeffabb6e4a2834679457fdc2ecfa729a8bdc4e5de4c76260c6581cf75fc2c39cb28b079c6eb0f96a375a8a432117c1b0af8036443e645
-
SSDEEP
768:YYDAs/6lg0LCWmbC1bCp+5jl/lt77inxfsHHGTFaA7OysX2WdqtbPtf6kU0I7/:h/Qcb8bCpC5lh7EfMGTvOHdqtdI
Malware Config
Signatures
-
Njrat family
Files
-
ba005dfa1567d9782703ee11becc81dca1132b18a055a366e5eb144ec491cffe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ