Behavioral task
behavioral1
Sample
56cbd4181042696a69edc1087c9e242605e984a2f4f3b4bd6d56702200689606.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
56cbd4181042696a69edc1087c9e242605e984a2f4f3b4bd6d56702200689606.exe
Resource
win10v2004-20220812-en
General
-
Target
56cbd4181042696a69edc1087c9e242605e984a2f4f3b4bd6d56702200689606
-
Size
28KB
-
MD5
b42a616122ad20787455c3d3453f060d
-
SHA1
6f5b429d4536189744a8e14f5be275daeef83582
-
SHA256
56cbd4181042696a69edc1087c9e242605e984a2f4f3b4bd6d56702200689606
-
SHA512
bcd79dc74c8399444b8c16d9011333ddd98b07119da64d4c5616875b159e184d12a29a0bbfad618fa3fa14025066f0ac422e2e518f50883a1bb7f1e68b6eb929
-
SSDEEP
384:UKZ+h79Yqe2VazuaYlQlWEh/S4zsu0LE2ZVGEbiNrxwRhK5GnJfetnH:Wh+qe2IuQIcj0LXV1b7Vm
Malware Config
Signatures
-
Njrat family
Files
-
56cbd4181042696a69edc1087c9e242605e984a2f4f3b4bd6d56702200689606.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ