Static task
static1
General
-
Target
NjRat 0.7D Green Edition by im523.exe
-
Size
1.6MB
-
MD5
baf1d3963f4e254be0f7b8a2936fece6
-
SHA1
4df4a398cc9f2635068b8981ddcfa5c4bcedaa26
-
SHA256
7e3937ccdc69f989a9fc639ca7e4b53404a5efdc6923f4f9f599731205aee0d2
-
SHA512
046bebe825cd985244fa764d9c2bd099ab1779fa076b069fae2bee4ad2ad74f5848b2db27bc60efd76fb05d9142ac9a95c0cf30870bd300abe6a2b8d0f1091be
-
SSDEEP
6144:ouNGO8etuNGO8e8szLSDeMFFFFFFFE2PjtHo:ouicuiPszLSDeMFFFFFFFNPji
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NjRat 0.7D Green Edition by im523.exe
Files
-
NjRat 0.7D Green Edition by im523.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 146B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ