Behavioral task
behavioral1
Sample
Server.exe
Resource
win7-20221111-en
General
-
Target
10573c7bffa077c984ed07e65c68fb9e3e766584cea955a38b049ce23dae70b2
-
Size
10KB
-
MD5
592eb8294e54bc3d8511b33dfcbbba25
-
SHA1
b759eeaa19b63af3ebdcad986e6e97b6599761f2
-
SHA256
10573c7bffa077c984ed07e65c68fb9e3e766584cea955a38b049ce23dae70b2
-
SHA512
38ba9d88fc2b51e23c4297651063e8ce30e5d674e9556b379e69edb4686db1c23b069eaef7d0a1868df146ea65cdb9804153b099e8d61a5fd503f6cb0664737d
-
SSDEEP
192:bq5TjU/n7gvFViRxJEH/qoCicDahMQlQUxBwK7nF0fX3JFW2R0U32HfvjtXzycEI:bq53bvFVieHSoC2h1dS/JokKRXzw9lTg
Malware Config
Extracted
njrat
0.7d
****X****
192.168.1.3:1177
e714b65dece39b6eb11b16f3a64da156
-
reg_key
e714b65dece39b6eb11b16f3a64da156
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
10573c7bffa077c984ed07e65c68fb9e3e766584cea955a38b049ce23dae70b2.rar
-
Server.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ