NjRat 0[.]7D[.]exe | Triage

Sharing

General

Target

NjRat 0.7D.exe
Size

11.2MB
MD5

f92efb6c4e3ddc221ddc91e80028ef78
SHA1

d2bf13f6e87427d14658c05595f10608004909be
SHA256

521da6f3fee1fa49ccd8fa67a8cfa1af65a7e2b88d9aa898020a8e305f81216e
SHA512

30a5a0293eaa2c7cf609f7465262a8cb5d8eb6c2ebb89acd17592e36269eca0bc373108475388f123ea13102758ef88104fe074a0c8f41fd4c06872f04d77699
SSDEEP

196608:zK4Bkmks5Ugya0wHbyp7Z7JEddbv3tXVmjOHDTZDXPe5r+ABASckIWX:zK4Brks5+a0wep7Z7axFXiOfZ6Eo7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NjRat 0.7D.exe

Files

NjRat 0.7D.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11.1MB - Virtual size: 11.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ