asyncrat | 0x000a000000012758-99[.]dat | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0x000a000000012758-99.dat
Size

85KB
MD5

6489ebd538516f3ec981a41459c7c225
SHA1

5669b0a629a9f30d8650bb3f0297bbae6b9be754
SHA256

8c06e6fc9ac2823c785ca0fef922de5fe1a01331e316e4ac36cdb0f0d062cc9d
SHA512

7e8f596e81bcc946bdf59cf6153c6848bc70703226fcfe508d3374b124235c6c17558573f25ab713ee9ad5c3724e70517e72322ca5a85682a4c5a54686644843
SSDEEP

1536:Fu1aD1T3xN2pkblv8/ybypQGmy1UPd/3wDu3Y6Uk9jg+rr6GbOsKpeQiQKWfS:FuchT3xN2pkbx8Kbypd1ayDud7r6GiXe

Score

10^/10

rat asyncrat

Malware Config

Signatures

Async RAT payload 1 IoCs

resource	yara_rule
sample	asyncrat

Asyncrat family
asyncrat

Files

0x000a000000012758-99.dat
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ