njrat | 34e313247f65dfba5285f09facd0b98f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34e313247f65dfba5285f09facd0b98f_JaffaCakes118
Size

108KB
MD5

34e313247f65dfba5285f09facd0b98f
SHA1

34ec144f13353536a01efe1cdbb1f85a3e16324f
SHA256

2cb7245b6ed5be0a3cefc836692aa05eee23a0b2d24d39f01d5ea3095c9c0a4c
SHA512

5333f71f4d0add956fd8defd528ff11f4b1fb38539c4e59d20ef15fdbae8a2a4f318dbcd69e2226a9d2b47edc334d53a62c896509af6d169d0a3d5ad8876bdb8
SSDEEP

1536:JD8wdBRyaVW3zc0pTk/hbR+hy77bXh7RznKhG29jTuGX8Djz0I7y7q:l82RfV+c0pkhYQXhleA29Z8DcI7y7q

Score

10^/10

njrat

Malware Config

Signatures

Njrat family
njrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34e313247f65dfba5285f09facd0b98f_JaffaCakes118

Files

34e313247f65dfba5285f09facd0b98f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ