njrat | NEAS[.]c55f9bbd0cd6f237058ae9057fc9dad0[.]exe | Triage

Sharing

General

Target

NEAS.c55f9bbd0cd6f237058ae9057fc9dad0.exe
Size

36KB
MD5

c55f9bbd0cd6f237058ae9057fc9dad0
SHA1

7e02563cebc87001374e520310f76ff43ea8aa7f
SHA256

5a83c9b35722dff8b5d715f2ecd6c4bda1781517a58809be63063ba12103d608
SHA512

705b9abb9e1308adb26a21daf768ad80723323d1a9e00475718d99c565ef5bb8ca393d285e37ca0093d849608a4ed15106b17e614d477e7a4ec7a9963ff9889c
SSDEEP

768:RBS4Yyc59w67o6c9noO+UtodMHXEhq5lxOBcmZPtLRjC:RBS4hW9bLc9noO+U+dk5lxOWmTk

Score

10^/10

njrat

Malware Config

Signatures

Njrat family
njrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c55f9bbd0cd6f237058ae9057fc9dad0.exe

Files

NEAS.c55f9bbd0cd6f237058ae9057fc9dad0.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ