njrat | 78792ff6f00e8fb3b62514b81d857c9a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78792ff6f00e8fb3b62514b81d857c9a
Size

19KB
MD5

78792ff6f00e8fb3b62514b81d857c9a
SHA1

dc2467dd8e63a12d660ca898543bb57b98526ac2
SHA256

06557c3d0df23d9503b4edaff821b18f794bb7001930976489442ea29599e9ba
SHA512

287daf8a8a23a39dde38b95a2ee55ab8a96ae87521b34d94659291f26cb9f1542e3767d7fb318fbf415139f57d302af526d3333cbb902e65e5d0992bf5aa9eb6
SSDEEP

384:drZ6XEzJ/9QzrFSvEJs6QHq8NLc0/BQTAJ2pE:drcudEJxQHBPehE

Score

10^/10

njrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Signatures

Njrat family
njrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78792ff6f00e8fb3b62514b81d857c9a

Files

78792ff6f00e8fb3b62514b81d857c9a
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\riamz\Downloads\Telegram Desktop\njRAT-0.7d-Stub-CSharp-master\njRAT-0.7d-Stub-CSharp-master\njRAT C# Stub\obj\x86\Debug\opa2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ