General
-
Target
S123erver.exe
-
Size
106KB
-
MD5
9a8bfcdfb43451e84f36db37a5dbeb69
-
SHA1
631c947853ecd90f85d1ceab0d4929b6f1a567b0
-
SHA256
ab911ff317e64605f78af4e8f6f637a8e4a014fb426edb858aab588e105e5fad
-
SHA512
e156cfcbe62af0687118e62eefac1afbf86c8a956c423af55fdfc325aec30b11a0280a8231375610c6990d19b1cb79a557968f93c020ebb4c684592070ec7c92
-
SSDEEP
1536:Zn1IuzxS6peRERX4mBEhyM1p6oTP1aed/y4y8v:ZnvxS6pmYovTAed/ny
Malware Config
Extracted
njrat
0.7d
HacKed
ODIuFRANSESCOjAyLjE2Ny4yFRANSESCODUStrik:MTIzNjE=
224a447697bf2b49e78d4ad88e1bc033
-
reg_key
224a447697bf2b49e78d4ad88e1bc033
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
S123erver.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ