asyncrat | a6d6386c28e2acfa95cf86abe531226b845e46ff4c96ad30e76b63cdae61b270 | Triage

Sharing

General

Target

a6d6386c28e2acfa95cf86abe531226b845e46ff4c96ad30e76b63cdae61b270
Size

62KB
MD5

a038d5ac6b947f595dafdb642f4a9d50
SHA1

e7a4722af6251183a71aefe42cb259abf534e52e
SHA256

a6d6386c28e2acfa95cf86abe531226b845e46ff4c96ad30e76b63cdae61b270
SHA512

8f6ea9afd4399f8bc63ecf13ea9bac7da5b444ea21ae579e8df7763313256a8007e615499cd0d13d64cdd382257ea1d2875f0370b3957b1c8a84d8c2f70785cd
SSDEEP

1536:VXBCcqCyN9dS9K3endtY71pUPuwu9UjZVZt:VXBhyN9dSDdtY7D6djjv

Score

10^/10

rat asyncrat

Malware Config

Signatures

Async RAT payload 1 IoCs

Processes:

resource	yara_rule
static1/unpack001/NEW AUGUST PO no645678.exe	asyncrat

Asyncrat family
asyncrat

Files

a6d6386c28e2acfa95cf86abe531226b845e46ff4c96ad30e76b63cdae61b270
.rar
NEW AUGUST PO no645678.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ