NjRat 0[.]7d Platinum Edition[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NjRat 0.7d Platinum Edition.exe
Size

7.9MB
MD5

5204e69c4f4b41321ecacb70dbc39e4c
SHA1

e5fd15062719c63865031c1598e87f4aa3146dac
SHA256

94e670492641dedd822e4ae73560f61e7b1e13e6f569188ef439f56eb320fec2
SHA512

b50cdc2990fd0a73152e55da970f7adce1013a9c87d5fa79e957542d0532d354cd78b94c8be8ade4b26ec2a33f590ae975486426a7c37a19b1a3b709f4647652
SSDEEP

98304:tqnpwrlEEwml7hCwOtV/QHyXjvlbqyo86RMDoMu2jx1sA6iOGIm1eOVqn:tqpwBeml7hcD5XjkNwfsA6iOdm1eOEn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NjRat 0.7d Platinum Edition.exe

Files

NjRat 0.7d Platinum Edition.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7.9MB - Virtual size: 7.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ