Behavioral task
behavioral1
Sample
2be6ac0fffb72cce8b466c43a28e78f37e2f58d536af84aa596c72d5947afa01.exe
Resource
win7-20220812-en
General
-
Target
2be6ac0fffb72cce8b466c43a28e78f37e2f58d536af84aa596c72d5947afa01
-
Size
144KB
-
MD5
cb1f81c5813502cfa465f192b2cad387
-
SHA1
81cc82abd46621da880a943ea2773ec920515508
-
SHA256
2be6ac0fffb72cce8b466c43a28e78f37e2f58d536af84aa596c72d5947afa01
-
SHA512
9ea3c4de0f4d37f1d54916dae9605484f2694f71b58bcd4a2d745b661447f99105712642b7e797d8929b19aa2efc4702552d8a07fd8daa4c38248377e0ea5ae9
-
SSDEEP
3072:Ol41b54t37U8EsqGNvKgtep1T9A3g1Hhlh8:Nb5035xqGZepp9ue
Malware Config
Signatures
-
Njrat family
Files
-
2be6ac0fffb72cce8b466c43a28e78f37e2f58d536af84aa596c72d5947afa01.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 84KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ