njrat | build[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

build.exe
Size

22KB
MD5

e8f5846dd8c7adcd6e8ab1c89af3aa8e
SHA1

f567721ed042116cd74f05aba5de5a2fc092a979
SHA256

5b5753a13d807edc65fed6ee7cf6a6800ecd8dbf76a4d51acd3f0a3e567a824a
SHA512

3e55a8d26d174d4b9412fe813784c4077456ff54230e4fc08e962e17ce1e7bc5e66dfaee4bc03570ac9ccda3b394b1a44d2e33f5a86fe8ac9bc9457066c16ee3
SSDEEP

384:/Ov7R9a738QbdUVCAdLdtF5g884YCbihSj/th3MRA0uuToEG15Is:GTRM73nzAdLdtFOIbzPU0EG1t

Score

10^/10

njrat

Malware Config

Signatures

Njrat family
njrat

Files

build.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ