njRAT[.]exe[.]malz | Triage

Sharing

Copy URL Twitter E-mail

General

Target

njRAT.exe.malz
Size

43KB
MD5

91f9995d4a2bc9ce890906439b796f29
SHA1

2b986160109af89693c732ee3c510bff248300d4
SHA256

d2e04274b842009181f6dc30792f0f15837b92e8effe06f1de08e96453ecfb32
SHA512

71e784608e9d93fa865aa7562f95ee68a69de2e0241b802e8f64c0e498da4f4c2930390f102c9006680e094b8272d81acff448321855becd509b5e5f31d21056
SSDEEP

768:wiIoVL8OfetlSK4owTrq9GTN2JE5C1X6HsjHaHqvt71I7dL1MnbN1cHIHCCjPkaU:lWG4dukLfa8bNHCCrk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
njRAT.exe.malz

Files

njRAT.exe.malz
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ