Behavioral task
behavioral1
Sample
Server.exe
Resource
win7-20220812-en
General
-
Target
Server.exe
-
Size
23KB
-
MD5
e11f216afce9ca74d6897e40d353a9cf
-
SHA1
df6af477178f5adf2748ddf9d683678da5141dbc
-
SHA256
c0c4d053e6645a77b6381a14c4c5e4c90fa9e317816d77e0ff49ef6a710e4e35
-
SHA512
49b5d43b46882ea86dba0d2c56f771f5852c9a69cb4e339c0d6bce1d94a1ac222e54a13e688e7392bf9aa9e5f119a7adaf0f0e64ca40d0fb5b02ea97f4f86af6
-
SSDEEP
384:+cqbCK0l4h7o9SVyDGvENuh46/gJkOmMSW38mRvR6JZlbw8hqIusZzZy/M:R30py6vhxaRpcnu8
Malware Config
Extracted
njrat
0.7d
HacKed
185.243.115.3:4444
30e472fa24e715e133b9d0f32ffd2e77
-
reg_key
30e472fa24e715e133b9d0f32ffd2e77
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
Server.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ