Behavioral task
behavioral1
Sample
01e04efc965d9c37c3dbbe5474ca8c4d.exe
Resource
win7-20220812-en
General
-
Target
01e04efc965d9c37c3dbbe5474ca8c4d.exe
-
Size
47KB
-
MD5
01e04efc965d9c37c3dbbe5474ca8c4d
-
SHA1
0bbe47f646bba7cf28708bad0c4939d47989653b
-
SHA256
b72ce49f4c8faadbcd1b6f1d5146f2fdb95ce51af6b3b7d5f10e5f095611bf94
-
SHA512
0c110fe2381e0949cdd750a90308722996fa52e3b1ab60f4a70e29a49ccb5c84008652179d72c0d8588dba385602256818e7dcde3a0e110dd1fbbcc00a315965
-
SSDEEP
768:NOEuILWCKi+DirlB4JyjikA8Yb2ge0O15xyFsvEgK/JnZVc6KN:NOtmrl7uzbppO1+mnkJnZVclN
Malware Config
Extracted
asyncrat
1.0.7
Nativez
20.42.114.46:8080
DcRatMutex_qwqdanchunnatiqwe
-
delay
1
-
install
false
-
install_folder
%AppData%
Files
-
01e04efc965d9c37c3dbbe5474ca8c4d.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ