NjRat Platinum Edition[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NjRat Platinum Edition.exe
Size

7.9MB
MD5

9ea34bd96a5e4c536787107a532e1bf2
SHA1

66941b6165076379114b4216ff4f60d9623c407a
SHA256

989114eac06b024e0fd631d7d7b6e5435f86ea349cdb59c9b7c4407d1527ae38
SHA512

e80b6ccd07e4187331085a23fea83acc6fbee611e0af2b4f1c724f2ae5b50688692c8aa917852dca400c705d25b83b95c4201e70c12cf68b35a276ee3a23cabf
SSDEEP

98304:gPRpwrSEEwml7hCwOtV/QHyXjvlbqyo86RMDoMu2jx1sA6iOGIm1eOVqn:gPTwWeml7hcD5XjkNwfsA6iOdm1eOEn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NjRat Platinum Edition.exe

Files

NjRat Platinum Edition.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7.9MB - Virtual size: 7.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ