njrat | JaffaCakes118_6779ed33529aa4468368d8a36a7c18d0 | Triage

Sharing

General

Target

JaffaCakes118_6779ed33529aa4468368d8a36a7c18d0
Size

23KB
MD5

6779ed33529aa4468368d8a36a7c18d0
SHA1

b88da681e5b4523dc98341eb109dcd64261b84ba
SHA256

4e947132eab0a1614a8b4d1b48148a777a6e069a6f4531854d87044cb51e0d79
SHA512

05312cc316a64ad5a47bb2d465256ec5314a92592912d698f1000c7c8d90ccd86e7ebf1b8eb971848be41ec585ac9f2845ab92ecdddb7b6fc31432fd45d6ee42
SSDEEP

384:3XY324bcgPiJLQrfARGSRUJsbY6ZgvSMBD3t8mRvR6JZlbw8hqIusZzZmk:3AL2s+tRyRpcnu0

Score

10^/10

njrat

Malware Config

Signatures

Njrat family
njrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_6779ed33529aa4468368d8a36a7c18d0

Files

JaffaCakes118_6779ed33529aa4468368d8a36a7c18d0
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ