njrat | 68a51b17ec06e2eb1325572de087fadc[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68a51b17ec06e2eb1325572de087fadc.exe
Size

22KB
MD5

68a51b17ec06e2eb1325572de087fadc
SHA1

8befe3faf3a333d64764ee24fdf26ca90e650141
SHA256

20312c8ff91c46b788b8d0789933b03235c975726d7a98d5cc61ca7502d5b78e
SHA512

1e9c3a40f1a88d8b9bf8708ea667967b6d915869628fef8f95bf4e81e360c6343bbb90b8e2706cad410e0ba7a2c3f9277fd9b5fa0199490124b7eb9a7c748ff8
SSDEEP

384:/Ov7R9a738QbdUVCAdLdtF5g884YCbihSj/th3MRA0uuToEGa5Is:GTRM73nzAdLdtFOIbzPU0EGat

Score

10^/10

njrat

Malware Config

Signatures

Njrat family
njrat

Files

68a51b17ec06e2eb1325572de087fadc.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ