njrat | 352278cba6fa8b3f2dc36005c999b598df6f32ae09b3d292bd30c42a3eaef0dd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

352278cba6fa8b3f2dc36005c999b598df6f32ae09b3d292bd30c42a3eaef0dd
Size

428KB
MD5

e6c6d42891c1e49da80e33261d3703d8
SHA1

b2a1d8efaf9791f26b58e9f34e8770ad7f645bcf
SHA256

352278cba6fa8b3f2dc36005c999b598df6f32ae09b3d292bd30c42a3eaef0dd
SHA512

05c98bbd829a3c966945b91eebfb4749c9d1ee27433abb7a782c97a6980dac885132d6071e3e040acbbb00a1fc3c3cfee15aa883cc5049cf769b28f5c97cbc10
SSDEEP

6144:e+aDmT6WjDK5rCRIVV91E+/D3tcO6npgbakibiyirSksiReiwbUo59R/Y:KyXvkrAu9l79t6pgWzWHsiReiwbUsA

Score

10^/10

njrat

Malware Config

Signatures

Njrat family
njrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
352278cba6fa8b3f2dc36005c999b598df6f32ae09b3d292bd30c42a3eaef0dd

Files

352278cba6fa8b3f2dc36005c999b598df6f32ae09b3d292bd30c42a3eaef0dd
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 770B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 419KB - Virtual size: 419KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ