njrat | c26dea755b4f24bc61f9e0b11ac9d371 | Triage

Sharing

General

Target

c26dea755b4f24bc61f9e0b11ac9d371
Size

84KB
MD5

c26dea755b4f24bc61f9e0b11ac9d371
SHA1

362fde66c7f1ee82440c129ecb6b3cf0bb7da121
SHA256

09b2a3c9ac6fb0be6e176b25ba165f579f937566168be9579d4e38d7f0051fab
SHA512

b3be24a23faf5aabc02d137ec6808a1dabfa3af7a76d8fe72bf65dd214b481c1134855922d239f4de7e4c480d9d2b254f59ae700767f73d58164593a4c7ee64b
SSDEEP

1536:8oouRsDR8q3RuV/MCoouRsDR8q3RuV/M:Ig28IRmg28IR

Score

10^/10

njrat

Malware Config

Signatures

Njrat family
njrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c26dea755b4f24bc61f9e0b11ac9d371

Files

c26dea755b4f24bc61f9e0b11ac9d371
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ