Behavioral task
behavioral1
Sample
b0e41ca5712b59a062ebd29ebb76e2870effaa605a73f91c02af746f5fa60d72.exe
Resource
win7-20221111-en
General
-
Target
b0e41ca5712b59a062ebd29ebb76e2870effaa605a73f91c02af746f5fa60d72.exe
-
Size
42KB
-
MD5
33c5ac88c77a64db9e75829208db8e23
-
SHA1
a20ec23cbd17452b1f8d66c6feea1ea17f5d3db2
-
SHA256
b0e41ca5712b59a062ebd29ebb76e2870effaa605a73f91c02af746f5fa60d72
-
SHA512
14e393992ec814ecb8a1db19b41eb3b2d94796ce27e6f3ea51d29f37925010ccdfe20b153b8f0b3be6ade97a0531d34f9a462a6fa3edb82c820513a5b1fe9d74
-
SSDEEP
384:8Zeqa33VarE8yTNJFqfQYMEnapai0+djX2CnKs1jUNNNCP33hYCtVKwJR7AMumgm:6Jq3MY5TnFqfpOp1X2CKuUVupVZuC+L
Malware Config
Signatures
-
Njrat family
Files
-
b0e41ca5712b59a062ebd29ebb76e2870effaa605a73f91c02af746f5fa60d72.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ