Behavioral task
behavioral1
Sample
2c694cd1fa99b5d049ef82a9fa176bcfa3658ee4e8fd427668667850d9f9bd3b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2c694cd1fa99b5d049ef82a9fa176bcfa3658ee4e8fd427668667850d9f9bd3b.exe
Resource
win10v2004-20220812-en
General
-
Target
2c694cd1fa99b5d049ef82a9fa176bcfa3658ee4e8fd427668667850d9f9bd3b
-
Size
216KB
-
MD5
1abd4046c4581e18a04f31fd01c37bc6
-
SHA1
e3a05f10b52399184714a01a5e3e29696d4345d5
-
SHA256
2c694cd1fa99b5d049ef82a9fa176bcfa3658ee4e8fd427668667850d9f9bd3b
-
SHA512
ad947e946607fdba605344445d20528e49fbc343a5fef865e96b8af85f917ac7ff5639f44271e6c9b87ad3cdbeba372289426f4a812ed8ce35f26701292da005
-
SSDEEP
6144:RbRZe1dUZiD78HUynURW5wT5RnR/0ktNJ:XZliD6dnZe9R/
Malware Config
Signatures
-
Njrat family
Files
-
2c694cd1fa99b5d049ef82a9fa176bcfa3658ee4e8fd427668667850d9f9bd3b.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 136KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ