njrat | ef40a5b697506be202d4dfe7b8ed8e517263e3fa11895dc22e4f1fc522647a80 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef40a5b697506be202d4dfe7b8ed8e517263e3fa11895dc22e4f1fc522647a80
Size

95KB
MD5

805a7e9392db0ce45fc09b043ca703c0
SHA1

4b5a1c8a19edecc763a47987f0aca758b516aacd
SHA256

ef40a5b697506be202d4dfe7b8ed8e517263e3fa11895dc22e4f1fc522647a80
SHA512

123d23e9304aab89f727863e5a6eefa38e26e388fb20068928ab18d9b226133e12028229386f95c83487819e550c81012949dec55ba86039b4edcbd8008c5304
SSDEEP

1536:vwTdGeVc2h6wKde9ArWOwoHc4pAFj2rCPAI:MVXkdrCPAI

Score

10^/10

njrat

Malware Config

Signatures

Njrat family
njrat

Files

ef40a5b697506be202d4dfe7b8ed8e517263e3fa11895dc22e4f1fc522647a80
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ