njrat | c7b3909a2ded5cb1c0a5cb6f09712041 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c7b3909a2ded5cb1c0a5cb6f09712041
Size

25KB
MD5

c7b3909a2ded5cb1c0a5cb6f09712041
SHA1

e5eaebae9aa82e18ade5c3d05a8a2ef49746867d
SHA256

c29346b7a6b537caffc25dc7b34e3a260ed234f14b5d3546985cb3ca2e3a8aa2
SHA512

06de25acf3caeaa5722a1515aed4ecf2dbdbde0dcd781a0923d9e80c76ebaa00d321f27e18ac3fcf93d4c24c381b7f44f412dccefc293a4d0db01b7cd9305a47
SSDEEP

384:oVaSIeJc4v6nnxcG3gLXg7CtM0DMHcjNQSVX2j+d1:HeK/xv3WXhhDDT0s

Score

10^/10

njrat

Malware Config

Extracted

Family

njrat

Version

MC43ZA==

Signatures

Njrat family
njrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7b3909a2ded5cb1c0a5cb6f09712041

Files

c7b3909a2ded5cb1c0a5cb6f09712041
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\riamz\Downloads\njRAT-0.7d-Stub-CSharp-master\njRAT-0.7d-Stub-CSharp-master\njRAT C# Stub\obj\x86\Debug\wow.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ