njrat | ba26254def1f881d9b5f0444745b8883e51bc09950e36584dbbab1ad5d370383

General

Target

ba26254def1f881d9b5f0444745b8883e51bc09950e36584dbbab1ad5d370383
Size

17KB
MD5

f79a17594a388bbd25b76ad36fac1d20
SHA1

b50320ab65558efb04cf13cfebaff6f0ae2daef1
SHA256

ba26254def1f881d9b5f0444745b8883e51bc09950e36584dbbab1ad5d370383
SHA512

155114393b114cf645a997263297a76b6f86a7f5eba43871322e129445e902e7aee1da0d3ea6638ad2e410ac38adea2d2a64754da44719ff32fe5e461296fb68
SSDEEP

384:ylqGPcFn/XCCWCGayn7zldboIGXG3VgzjcoBlOkr:eEVCday7PbeG3CP9j

Score

10^/10

hacked njrat

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

178.187.164.4:7777

Mutex

Windows Update

Attributes

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ef432c721d03728f4828aaecd2db265474fc13306b0d0f042df5025f2b4d9e2e.exe

ba26254def1f881d9b5f0444745b8883e51bc09950e36584dbbab1ad5d370383
.zip

Password: infected
ef432c721d03728f4828aaecd2db265474fc13306b0d0f042df5025f2b4d9e2e.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ