njrat | 53bf07dd9b46e26b23cdfdb248046ba8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

53bf07dd9b46e26b23cdfdb248046ba8
Size

307KB
MD5

53bf07dd9b46e26b23cdfdb248046ba8
SHA1

1f7f23bd27fb29fcc674206c5f36ee2aabd9f344
SHA256

28402bf21e5a71ebed29e9fa6dcc660afc9f41a6ee63754bcc8e60c183e4a718
SHA512

0a5366dee6073c276e5b49e5ba480028bffc21129084ec0c0c4d4f8490036a9dbfe453481b33186edc9b19095e5b3025b5dae50cfcc4f7b03abbb8eaaf99c7d3
SSDEEP

1536:UWirlL7XnqzVWO2/nCTrCNMeyVBjv8YoyIYxgy:U5L7XKVWxCoyVBjv8YoyIY+

Score

10^/10

njrat

Malware Config

Signatures

Njrat family
njrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53bf07dd9b46e26b23cdfdb248046ba8

Files

53bf07dd9b46e26b23cdfdb248046ba8
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 265KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ