njrat | 68a51b17ec06e2eb1325572de087fadc[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68a51b17ec06e2eb1325572de087fadc.bin
Size

11KB
MD5

1d88fce321a204a1ed03da66e1edb850
SHA1

d7e12f3bb536ab603d441b288411e66e6fb64e23
SHA256

9e9190985b926ba0252a67cfe4e539a427f3ce98ba3784c46907330eb0de1b49
SHA512

e95a599895922299378176708925068d516500c6ea57098ea9b1a889d5671248211fa6e1cdffc9899abb3e8b11f512a1718204ed4fc40f8dd548196cfe265b99
SSDEEP

192:UgpGOBRW5RAaFr4tcV1IiVe8fe5jr2LuZiwHF5A2yj7AhvifrKY:rRRWLAaGCV7VL2Ziw42a7ivifh

Score

10^/10

njrat

Malware Config

Signatures

Njrat family
njrat

Files

68a51b17ec06e2eb1325572de087fadc.bin
.zip

Password: infected
20312c8ff91c46b788b8d0789933b03235c975726d7a98d5cc61ca7502d5b78e.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ