asyncrat | 2efe493bb7af6e276db22c15df9358e2fc72a6281d08d3bde2050653d8b285a0 | Triage

Sharing

General

Target

2efe493bb7af6e276db22c15df9358e2fc72a6281d08d3bde2050653d8b285a0
Size

4.8MB
MD5

1bad0cd2505f7c263a861d6e85cde074
SHA1

fa53e8aa6b0f25a7095ac86cbc7792f8603d4928
SHA256

2efe493bb7af6e276db22c15df9358e2fc72a6281d08d3bde2050653d8b285a0
SHA512

7a528ba4f46572cad00d79cc481648a9c3d3a3189cf09a81231a9b5ceff4d59fd94c4ec3c173eaf924bc2d80d73d42ab39050fa06416a78ac3989495285de1d5
SSDEEP

98304:yQe7GQDAHZfAlg4JDdx+gGI7ju6IlnYVaj+Vqq9ShoJjPJp/xoQabQMOz:t5feg4jxvGiPIlKcixljDqQKOz

Score

10^/10

rat asyncrat

Malware Config

Signatures

Async RAT payload 1 IoCs

Processes:

resource	yara_rule
static1/unpack001/76BVN200706awbinformation_PDF.exe	asyncrat

Asyncrat family
asyncrat

Files

2efe493bb7af6e276db22c15df9358e2fc72a6281d08d3bde2050653d8b285a0
.zip
76BVN200706awbinformation_PDF.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 212KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ