njrat | 2032-63-0x00000000001E0000-0x0000000000220000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2032-63-0x00000000001E0000-0x0000000000220000-memory.dmp
Size

256KB
MD5

883da24a0bfd624d0d8a9afaebfdd5df
SHA1

991bc7c4a3d53f2f44751b9f2fabc4dd37b7950d
SHA256

3e1aaa5d769a7b2ef3875d203a0597ad294a6447008e0ffc540402fb5819c530
SHA512

0758ca9b721af2cca1f8f9145eeea877a460b327cf236e2af6c88950095a0c9eceff11b5e3b64d438822f8588d12f8fabd988a62b98e20ae6d4832d191a2d4b9
SSDEEP

1536:9UKAVR4QVkujPUKAVR4QVkujPUKAVR4QVkuju:Un4TuOn4TuOn4TuC

Score

10^/10

njrat

Malware Config

Signatures

Njrat family
njrat

Files

2032-63-0x00000000001E0000-0x0000000000220000-memory.dmp
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ