njrat | Payload[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Payload.exe
Size

55KB
MD5

077f16541cc302f1d5b96526b90bd891
SHA1

448625fe4a1d2e7e857bfa58d01efcb1691dc6b5
SHA256

a9b9b7123694a8a5434fab6484a24577206bbf035e74aa7aa83b523406c6a12e
SHA512

7e03ee70931291fba6cbea851feb4ccfca7696e384e5c99a6e11baa86d9160efaa72831520adeec427b484f76a4fd93c26305c6c45b02b761ab2681cbd538a3d
SSDEEP

768:16a6lOt1Man8E2N6FikUt34okSNrmwFvfu0YMDHPs3L7XJSxI3pm3m:161cDnCN6FikSJDCwsNMDSXExI3pm3m

Score

10^/10

njrat

Malware Config

Signatures

Njrat family
njrat

Files

Payload.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ