njrat | E2C31090339C37FAF04CE2489EA35E9E22844B5AEF1A0[.]exe

General

Target
E2C31090339C37FAF04CE2489EA35E9E22844B5AEF1A0.exe
Size 3.2MB
Sample230127-3et5gadd93
SHA256 e2c31090339c37faf04ce2489ea35e9e22844b5aef1a05022bbff6c6d8a13b68
MD5 e8afa6968df077d832e6f9a8b6d7cb77
SHA1 7b3600e502a32bd4f1904eae88e94ba736cf9b38
SHA512 05babf51d9593324df37e689dbe667f8bb905d63d476617c12a5f410c710fb85cf85912349f62cfe18fbe823f3d4184ff882da0dbab024b6f024fc4b47db0aa4
SSDEEP 98304:V0qXpy05Q0N1rsYSZ6BoXh1kkypSH3Oh5Bemg:Vt405QYtsTEB08T8HehLv
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

njrat

Malware Config

Signatures

Njrat family
njrat

File Explorer

E2C31090339C37FAF04CE2489EA35E9E22844B5AEF1A0.exe

.exe 3.2MB

E2C31090339C37FAF04CE2489EA35E9E22844B5AEF1A0.exe

IMPHASH 9222d372923baed7aa9dfa28449a94ea
SHA256 e2c31090339c37faf04ce2489ea35e9e22844b5aef1a05022bbff6c6d8a13b68
MD5 e8afa6968df077d832e6f9a8b6d7cb77
SHA1 7b3600e502a32bd4f1904eae88e94ba736cf9b38
SHA512 05babf51d9593324df37e689dbe667f8bb905d63d476617c12a5f410c710fb85cf85912349f62cfe18fbe823f3d4184ff882da0dbab024b6f024fc4b47db0aa4
SSDEEP 98304:V0qXpy05Q0N1rsYSZ6BoXh1kkypSH3Oh5Bemg:Vt405QYtsTEB08T8HehLv
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

12872

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileA FindResourceA FreeLibrary LoadResource WriteFile SizeofResource GetProcAddress LoadLibraryA LockResource EnumResourceNamesA CloseHandle FreeResource GetWindowsDirectoryA OutputDebugStringA GetTempPathA GetModuleHandleW ExitProcess DecodePointer EncodePointer GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection LoadLibraryW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetStdHandle GetModuleFileNameW Sleep HeapSize GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc LCMapStringW MultiByteToWideChar GetStringTypeW

shell32

ShellExecuteA SHGetSpecialFolderPathA

Sharing