asyncrat | 559c4deadba112a5272db21cfbf44016[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

559c4deadba112a5272db21cfbf44016.exe
Size

587KB
MD5

559c4deadba112a5272db21cfbf44016
SHA1

f1a24d639b6c45462f64ef7e14a11092c1819659
SHA256

4458a1f6050e6dda81597624cd2464ec0ee79d1021384420d9f0462695d2f8dc
SHA512

30ccbf6871f9aa75968514c032e67eee3f1e6ad2c871d6989c19ec6f960a2f9acb0300cfc590809fdcdec8fa252c0975a5d484197980be5ecbd4ecfc4363b162
SSDEEP

6144:/WynU/PwAV+nTTgc/ihYwqhq3Ovw2adkA6sz04l3lC4W3ct4a17dh6Y4Da/s:+yBK+nTTg7hYVOOz4l3oVct71j6Y5E

Score

10^/10

rat asyncrat

Malware Config

Signatures

Async RAT payload 1 IoCs

resource	yara_rule
sample	asyncrat

Asyncrat family
asyncrat

Files

559c4deadba112a5272db21cfbf44016.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 389KB - Virtual size: 389KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 197KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ