asyncrat | bGsw[.]exe | Triage

Sharing

General

Target

bGsw.exe
Size

47KB
MD5

7f7eae31fd88251f48d55641fe8a9279
SHA1

7d763dff2a1085e16b13d9f3f1badd95cb987b9d
SHA256

49f5ab1d1ac3fc37bc87caebe6566465b04207c015a77070dafa9b2b3d5e7c2a
SHA512

8afdb8a4801cf3609f36fc74096480cd683d351bce85b5155384a1d8d5e417126034df9a645e0d3a361ec64bac8a1228ff4a97c108dd8c46e077978df2183caa
SSDEEP

768:p96mxUTILWCaS+DiMtelDSN+iV08YbygeB29sASYtsvEgK/JnZVc6KN:p96AKWMtKDs4zb1G29rSYOnkJnZVclN

Score

10^/10

rat asyncrat

Malware Config

Signatures

Async RAT payload 1 IoCs

resource	yara_rule
sample	asyncrat

Asyncrat family
asyncrat

Files

bGsw.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ