njrat | JaffaCakes118_4e89c27d5d7c73cb91591f8495d1a209 | Triage

Sharing

General

Target

JaffaCakes118_4e89c27d5d7c73cb91591f8495d1a209
Size

57KB
MD5

4e89c27d5d7c73cb91591f8495d1a209
SHA1

46a9caa2268ce4a299e91776d3fb85c773b75cee
SHA256

c3281042debdb2e07aaf7049da0f8613597c300f77f9d3b8c5a6baf2d6555941
SHA512

882d4263fb8d4b002ff73d7831d6f749871e0ba3b5b666fb1d992614e61c073af2fd81a87595f989cde9a8ef5de5076eef7b86c2a3a0d95176b1a04415de8629
SSDEEP

768:SAOPN7/YN/EgnmowpehqcAeK/gVt32A/vMHTi9bDk:SAFDnmohqXx/gDBnYi9bA

Score

10^/10

njrat

Malware Config

Signatures

Njrat family
njrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_4e89c27d5d7c73cb91591f8495d1a209

Files

JaffaCakes118_4e89c27d5d7c73cb91591f8495d1a209
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\af\OneDrive\Desktop\mrx\mrx\obj\Debug\mrx.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ