njrat | 5dd9276b9ab06cafca7422d880ec9edd[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5dd9276b9ab06cafca7422d880ec9edd.exe
Size

165KB
MD5

5dd9276b9ab06cafca7422d880ec9edd
SHA1

d70988e4ef8ee35e97c6e29266733ab1b9c8d7dd
SHA256

efa8cf6765c00f318727086bed949c107f0fdd0a12e05189018f540192155ddb
SHA512

5eb8fae454b1037217d1d6d3ba27e3c415aeb3e11d19e5ffc03c20b14471dd1c36f52b682ae9ebefc3cad226f9ccd770f96ec7159299392666ef5036aab31877
SSDEEP

3072:ZSDZj/VT68wEDP/i7/0pNgRUYQyOscE8W4+bT7lEVLL9:ZSpyspIUVyffL/b/UP

Score

10^/10

njrat

Malware Config

Signatures

Njrat family
njrat

Files

5dd9276b9ab06cafca7422d880ec9edd.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ