Behavioral task
behavioral1
Sample
69d96c2c29f7475d82ff72fa8947b22bb0ea4634b0c63380e859e10f19057788.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
69d96c2c29f7475d82ff72fa8947b22bb0ea4634b0c63380e859e10f19057788.exe
Resource
win10v2004-20220901-en
General
-
Target
69d96c2c29f7475d82ff72fa8947b22bb0ea4634b0c63380e859e10f19057788
-
Size
1.1MB
-
MD5
4021ef6424a882498dd76f03a7f3689e
-
SHA1
dfe52ed6cb32c8c141fe9785c485c38fa58dfc31
-
SHA256
69d96c2c29f7475d82ff72fa8947b22bb0ea4634b0c63380e859e10f19057788
-
SHA512
21cf0af8d746737a70bf542eeb398f133b838019929579b47392a21c227d22ceff181f7b32c2574bffd48e85467e19a5d1d8bcf36bc12febf829606ad865f049
-
SSDEEP
24576:gn1T/Ny6o0Nu0n0t0LCDL0nTC8ErRdDFmLBZ+Kk54+0Ejl:gfo0E0n0i+8nm8+jFmLBMH2+0Ejl
Malware Config
Signatures
-
Njrat family
Files
-
69d96c2c29f7475d82ff72fa8947b22bb0ea4634b0c63380e859e10f19057788.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 904KB - Virtual size: 902KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 224KB - Virtual size: 221KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ