njrat | 210f68e2d09037bed5bf181cf1acdb22[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

210f68e2d09037bed5bf181cf1acdb22.exe
Size

23KB
MD5

210f68e2d09037bed5bf181cf1acdb22
SHA1

1c1d4ee3d405a8f14eff11e2ec40d80dd678bd23
SHA256

7b8abc634e27ca7b8faa345bc0d168c9e00ab5970b4074f357e1345867ba37c9
SHA512

ea42cf3b989a6e836b9227e9696d8c471c970d3576fc78a937f1fc4b43116614e9f66220d4a56291d0a1e58ff1462274dd65101812c6a5a82e13c40631a500d2
SSDEEP

384:C9IEqy/VFC8K2SJwhlb+mZk5SD5Qf/xMy7+88N8/93Hw8h6js:wqSSkU+QHP7J9FXr

Score

10^/10

njrat

Malware Config

Signatures

Njrat family
njrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
210f68e2d09037bed5bf181cf1acdb22.exe

Files

210f68e2d09037bed5bf181cf1acdb22.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ