asyncrat | bDxD[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bDxD.exe
Size

47KB
MD5

ce58fd93ed03f528a635171addb8a20b
SHA1

fb411a8947a8b350f6308a22c2485fe982b3b3e4
SHA256

a02d27b18fb788cdbebc909f1fd722ac713b46ffc385c5b0c5d40ec5b545c070
SHA512

b7d7bc7963edc662885d2c93ecbe4a6b2cf665a35f8e47e80da3e542fb85834c13e5760c57d0a8e9174f781b001f74153a31d0987f193515f90f0ff994f26252
SSDEEP

768:p96mxUTILWCaS+DiMtelDSN+iV08Ybygeh/dpUvEgK/JnZVc6KN:p96AKWMtKDs4zb12/onkJnZVclN

Score

10^/10

rat asyncrat

Malware Config

Signatures

Async RAT payload 1 IoCs

resource	yara_rule
sample	asyncrat

Asyncrat family
asyncrat

Files

bDxD.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ