Behavioral task
behavioral1
Sample
Server.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Server.exe
Resource
win10v2004-20220812-en
General
-
Target
Server.bin
-
Size
37KB
-
MD5
2aabda15daecaafebc3c33ff0b8d0187
-
SHA1
bad0478f5bb77e98400eed1a2f4ecc3f355aa27d
-
SHA256
ec468184adea7199bbffc641bca20e6e127638dc1d63aec96680d12d549f619c
-
SHA512
754452bbd901301f35e006329f5a8150d56f62fd1b8228ec8ca18247621951d707febc99f5d0fa91438f0895b82d14750e415a9286c2c2b7f29d69dd80554207
-
SSDEEP
384:pQveoixJhl7OHg1WykrppPl48uiX60rAF+rMRTyN/0L+EcoinblneHQM3epzX2NH:yv+R1NkrppqFidrM+rMRa8NuQDt
Malware Config
Extracted
njrat
im523
HacKed
topics-yrs.at.ply.gg:30275
738c956a9334bd3fa531ea8d43f82238
-
reg_key
738c956a9334bd3fa531ea8d43f82238
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
Server.bin.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ