Behavioral task
behavioral1
Sample
562715e04723d243f2655243ce07accadcc3fc89ad9267f40564865cc6f3e168.exe
Resource
win7-20230220-en
General
-
Target
a8e24ce6d3cc2e2988a3573d2c551c1b.bin
-
Size
1.8MB
-
MD5
a8e24ce6d3cc2e2988a3573d2c551c1b
-
SHA1
60656a3fd36ade99d4d44b59f2d998788083a830
-
SHA256
0900cfbf6bfc1487fa3c092493b99e24119d257f85c9eea4fd5ffd865902ff1c
-
SHA512
e77f93e8f6596f7e229a10f69967bd37e133cb307eafd9e26e11d129bf7c7e2b5412b02a7fdbd414c15f74c677ac5d1da06accc66b95b93973477d4dd1e52aa8
-
SSDEEP
49152:AZ/lFa9/4Tqm859AaKytsMOn1icd7aEgY1CqUskK:AZ9vqmeAaKytsMcrzxmK
Malware Config
Signatures
-
Njrat family
Files
-
a8e24ce6d3cc2e2988a3573d2c551c1b.bin.zip
Password: infected
-
562715e04723d243f2655243ce07accadcc3fc89ad9267f40564865cc6f3e168.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.crypt Size: 912KB - Virtual size: 912KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ