Behavioral task
behavioral1
Sample
9b8f022e930ebad2399da8209d41e12d8a77ca2396e5f14cf3a6e1b48212b648.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9b8f022e930ebad2399da8209d41e12d8a77ca2396e5f14cf3a6e1b48212b648.exe
Resource
win10v2004-20221111-en
General
-
Target
9b8f022e930ebad2399da8209d41e12d8a77ca2396e5f14cf3a6e1b48212b648
-
Size
91KB
-
MD5
770d6dc5abd48cb1221415fdf87121ac
-
SHA1
af1265b14277b78f3116c064f9177ef24bea5a5c
-
SHA256
9b8f022e930ebad2399da8209d41e12d8a77ca2396e5f14cf3a6e1b48212b648
-
SHA512
dcfa15ac36279bfc4085bf0ede2129f8ede226b2047ed52980d0f7b946e6dd6ac52939df34b166935a578e834820ba96815f85d0c0aca78e3081cce0843080f2
-
SSDEEP
1536:73jNAuZV6RWuhSZrnQ38C3vE2xhYuXbZ91vDN14YXdwfdP5AZjNrGzPCJk6EIO0l:XSuZg09ZrnQ3vvsuXbZbLn4+ebMjWkkF
Malware Config
Signatures
-
Njrat family
Files
-
9b8f022e930ebad2399da8209d41e12d8a77ca2396e5f14cf3a6e1b48212b648.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ