njrat | 49d861db3085229cc6ec19f6f20dbc97d2aa5444077711957b40c3a16cdd5420 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49d861db3085229cc6ec19f6f20dbc97d2aa5444077711957b40c3a16cdd5420
Size

272KB
MD5

77f5adb68e0af9b35272bd0ab67c8660
SHA1

137c97fd97d2ea1f15ea3a0022b786a565176da6
SHA256

49d861db3085229cc6ec19f6f20dbc97d2aa5444077711957b40c3a16cdd5420
SHA512

3208c9bb54871d7f4aba7249632304ca9c47eaa0a5891ad04d62f8fdb4dd321413f1572d18995c979124ca9cfebb018406466db459d73f49d91616a3c46b1dbf
SSDEEP

6144:OdGFeXfdbUjwwGO0Voml3Ihh8AXQFdmCGCFAF55LFvx5FJx5ca7BgKt:OdlXfWB30Kxtt

Score

10^/10

njrat

Malware Config

Signatures

Njrat family
njrat

Files

49d861db3085229cc6ec19f6f20dbc97d2aa5444077711957b40c3a16cdd5420
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 200KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ