njrat | 594f78123bb48f6c54a204a3e59c244d | Triage

Sharing

General

Target

594f78123bb48f6c54a204a3e59c244d
Size

21KB
MD5

594f78123bb48f6c54a204a3e59c244d
SHA1

e57a2cae327535315b7689e677102bf951a8f212
SHA256

13cd499b83ba130c02114a625dec4d0c05346fdc96f8473d3619b5ccb5586fcd
SHA512

b9608497a7ff6ec3b65fe5a4ec2b8082e3711eeb59a436794b96de5f3e0a1df5caa7e1771fb1c25d457877c79750dd7c4ee43a337d592756cc9733e8a62b9fff
SSDEEP

384:uxht50yHS+f4TUWk/WcrQuLU7+V0hLcj/K+hSEvjLxLeeQIDXYjoq:uxht57S2WXcUuLEmRXlB7Yjoq

Score

10^/10

njrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Signatures

Njrat family
njrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
594f78123bb48f6c54a204a3e59c244d

Files

594f78123bb48f6c54a204a3e59c244d
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ