njrat | 33333[.]rar | Triage

Sharing

General

Target

33333.rar
Size

80KB
MD5

800b300a99636aa9a00c2dba30a21448
SHA1

1dea778983da0734bdca24478f1f957ab5437e06
SHA256

8eba93f3b37cde9a09a9240a3026cae850c7bfb0ac9217c7aebc02a610d82ca3
SHA512

3f5f03eff75992e26bbe42380dfc31b91f85c89dc3790a9dc66a43434842b9cbc6a52d53cab426aac9fd0374b0d31f3684f6e380ffa3107b805bb7d0e1c26f76
SSDEEP

1536:vwpZBVcxsgCKG+/fEX3hJFYaPrdWhXsP6ulrbaF8hwaahIpHO5uAoiA13db:vwpZBVJEEnhLYajdWBsPHxb1aEO57oiY

Score

10^/10

njrat

Malware Config

Signatures

Njrat family
njrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/33333.exe

Files

33333.rar
.rar
33333.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ