njrat | 8aa34cdebf2b6198a378669b16aacf5d[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8aa34cdebf2b6198a378669b16aacf5d.exe
Size

42KB
MD5

8aa34cdebf2b6198a378669b16aacf5d
SHA1

20645df8d8215a1f2841dac0ca9fba7a66d05006
SHA256

4331d07d025fbb29f4acd1d9c616a7f71a72bdf02a5f00ce5e40fc6004545723
SHA512

de332ef2c20c0192da72cda740b86190725007edb93e273ded040842ebcc02cef14d5b40efb45c837ca00eb1476580d6209d1fc99139a4819204bfafaf5bbf42
SSDEEP

384:zZe0ziOdsbhKIyKFlD9siEEILr2jCCnKR13cUNNNCP33hYCtVKwJR7AMi/greT0k:9NNiwFKLD9n0yCCK0UVupVZi/+L

Score

10^/10

njrat

Malware Config

Signatures

Njrat family
njrat

Files

8aa34cdebf2b6198a378669b16aacf5d.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ