njrat | a1f6cd3f76105ff25444644af4675bcf | Triage

Sharing

General

Target

a1f6cd3f76105ff25444644af4675bcf
Size

26KB
MD5

a1f6cd3f76105ff25444644af4675bcf
SHA1

171a9f7f813299bc8538836fc19dbb0f0cc5bb9e
SHA256

2bf1f2bf24c19a93398cd69bdfb3f56c7d8650f4eee34de7d20878ec5231b178
SHA512

b70d144d6b36bd463cc10a87dd59fd560adbdbb88cc27710f3e4c0d78e51f92b2d2129fbeb236c2d25645dec226689ecf6a43d4b2fef87888b878b00dcf2ec6e
SSDEEP

384:bgVaSIerM4v6nnxcG3avv67IcMyMHcjNQ1VXFHdI:b/eI/xv3avA5DMI

Score

10^/10

njrat

Malware Config

Extracted

Family

njrat

Version

MC43ZA==

Signatures

Njrat family
njrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1f6cd3f76105ff25444644af4675bcf

Files

a1f6cd3f76105ff25444644af4675bcf
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\riamz\Downloads\njRAT-0.7d-Stub-CSharp-master\njRAT-0.7d-Stub-CSharp-master\njRAT C# Stub\obj\x86\Debug\wow.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ