General
-
Target
Server.exe
-
Size
93KB
-
MD5
3cbf6e57b14a57ec9873564109ed293b
-
SHA1
ffb229b7d5a4a1c97e316812e60b2f4c5ca2e75d
-
SHA256
284f61865c2e04fd1b835bcc4f488565140823bba0ca40eba083108d560ddd52
-
SHA512
dc810a473ba15bc8402bb41174008582179ef6869dab7f0780f1e35ecb98dbf980408687486798e36ed922d8222af73d623645ca9c4f193cda394db43d46a670
-
SSDEEP
768:YY3NxEFKghFchQVTqWnwz/1h3XE/dlczxXSsvXxrjEtCdnl2pi1Rz4Rk38sGdpO3:txeK6bTq8itNEUVhjEwzGi1dD0DOgS
Malware Config
Extracted
njrat
0.7d
HacKed
b3h5FRANSESCODEuZHVja2Rucy5vcmcStrik:MTQ0NA==
c0a391fef49101cfadbb06a771d06348
-
reg_key
c0a391fef49101cfadbb06a771d06348
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
Server.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ