njrat | Icon Extractor[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Icon Extractor.exe
Size

847KB
MD5

66def43f966b03de845f442f5a957343
SHA1

fe4a82359fcf998ef8fb2e831a30cde039610271
SHA256

20f73b9034848ef3d6f1f9c2d19b4d87fcf8e50fa6296ac6c48486e900a117bc
SHA512

76913173bc54ac0bf078fcabf0ecffdba2aa0c36127ea9015da9e0c5884b7efe6a4fdbaecce11fe6cbcb6cf46add69c03f2180ca8d2c92787a2df537788182ba
SSDEEP

6144:d0YJPZDn4kw0YJPZDnjBW3PQ90YJPZDnE0YxPZDnfUicnanvM:mCDLCDjBRGCD74DMica0

Score

10^/10

njrat

Malware Config

Signatures

Njrat family
njrat

Files

Icon Extractor.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 609KB - Virtual size: 608KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 182KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ