General
-
Target
d34e70ac19f19437e928549c9f356778abe716fb5e576a1834a0160fc91470a2
-
Size
47KB
-
MD5
e6a81346cb023c8edbf72ebfce32fe4c
-
SHA1
8757d102f3d24ecb5d3e4ab4a4781c14ebdb751b
-
SHA256
d34e70ac19f19437e928549c9f356778abe716fb5e576a1834a0160fc91470a2
-
SHA512
d9b4bf4ba94a99b985ebd788b71c73c301bed317f68d85bfe97900a47bbe0ecac1389a952d3accf0c6ed986b68203d68d56ce57668cb617f46551ecf80923612
-
SSDEEP
768:4ZztILg+kM+biZjDVCjvGitVYb+gem3ivqlnvEgK/JHZVc6KN:4ZP0X8zObBUvqlnnkJHZVclN
Malware Config
Extracted
asyncrat
1.0.7
Default
193.149.3.239:1938
DcRatMutex_qwqdanchun
-
delay
1
-
install
false
-
install_file
Yılanoyunu.exe
-
install_folder
%AppData%
Signatures
Files
-
d34e70ac19f19437e928549c9f356778abe716fb5e576a1834a0160fc91470a2.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ