njrat | 2d02bda39ade7a6e02f161723e4073ce[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d02bda39ade7a6e02f161723e4073ce.exe
Size

36KB
MD5

2d02bda39ade7a6e02f161723e4073ce
SHA1

4c76fbcc8c958f04c0b14b9fd470502dd9a0aac4
SHA256

673f300f534562404d1abf46541a76cefb3b8854d91abe0374a7b04d8e12eac5
SHA512

a5caffd4e93f94521b42e608eba8ca6057447190c5a0e6e082f71efe5fdeb7414dbc5a42c363b912129a4528f8a98d730cf10fa749469989459d6fe638bf3880
SSDEEP

768:v9SG+WoGpKD1RxHOqYU+aF0bUEhq5lxOBcmZPtO9jC:v9SG+E4DxHOqYUDFD5lxOWm2A

Score

10^/10

njrat

Malware Config

Signatures

Njrat family
njrat

Files

2d02bda39ade7a6e02f161723e4073ce.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ