General
-
Target
d775bef532e71e692eb0e66292da60db38864a4f3dba5d2382ace1992ddd55f3
-
Size
63KB
-
MD5
22021cdbf9936f8a469ecb5e11636799
-
SHA1
9a3186aaa9fa202c1666d5b751db53b13b961002
-
SHA256
d775bef532e71e692eb0e66292da60db38864a4f3dba5d2382ace1992ddd55f3
-
SHA512
f3efc9a323bf144cdec2db10e33bdcae5512543cbddc349d21a9ecce9108bc376aa3777cc15f01c3954497091b7bac3c4b8afb9a1c18008c8dc92f4058a9e45b
-
SSDEEP
1536:TJmVTHUv8HtonZ1tmi8ALbbrwKreUdGZZVclN:TJmVTHUv8HyZ1tRJLbbrjreZzY
Malware Config
Extracted
asyncrat
1.0.7
Default
bigrussianfloppa.duckdns.org:1001
Mutex_qwqdanchun
-
anti_vm
false
-
bsod
false
-
delay
1
-
install
true
-
install_file
Churkaebanaya.exe
-
install_folder
%AppData%
-
pastebin_config
null
Signatures
Files
-
d775bef532e71e692eb0e66292da60db38864a4f3dba5d2382ace1992ddd55f3.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ