njRAT M[.]A[.]H[.]exe

General

Target
njRAT M.A.H.exe
Size 5.6MB
Sample261001-lp49ratfrf
SHA256 f5cb5289f0cd3411bec24a4577c00d86bce1ead89a4cbbc3fa1c8bab460f2730
MD5 2e26a22af40730a6dccdca529dcf9c10
SHA1 eb3fd4c171ca3a848eb247e26d1e02195de45c22
SHA512 d7b6724428b4e419fb94847c4bddb6e3dd67e5195ae7c29ed0e8287cff5382b1bdff1061b60d17adff722a8f83ef642cd456646c9b29dcf3f1b6f7eec0364dce
SSDEEP 98304:XRJBmu09trPhcBXPOv1t/t+5Wf6Brq61:hy7rhcpPOv1t/OW411
TLSH
T11756F613B309E884D8710FF11640CAF488965D4E5565C2F906D9BB20BAFDEC9BE1BBC6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
njRAT M.A.H.exe

File Explorer

njRAT M.A.H.exe

.exe 5.6MB

njRAT M.A.H.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 f5cb5289f0cd3411bec24a4577c00d86bce1ead89a4cbbc3fa1c8bab460f2730
MD5 2e26a22af40730a6dccdca529dcf9c10
SHA1 eb3fd4c171ca3a848eb247e26d1e02195de45c22
SHA512 d7b6724428b4e419fb94847c4bddb6e3dd67e5195ae7c29ed0e8287cff5382b1bdff1061b60d17adff722a8f83ef642cd456646c9b29dcf3f1b6f7eec0364dce
SSDEEP 98304:XRJBmu09trPhcBXPOv1t/t+5Wf6Brq61:hy7rhcpPOv1t/OW411
TLSH
T11756F613B309E884D8710FF11640CAF488965D4E5565C2F906D9BB20BAFDEC9BE1BBC6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

1234

Minor OS version

0

Major OS version

4

Entry point

5861470

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\Mr-Abu-Hani\Desktop\SRC - NjRAT 0.7D\NjRAT\obj\Debug\NjRat 0.7D.pdb

njRAT M.A.H.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

njRAT M.A.H.exe

mscoree

dotnet