Behavioral task
behavioral1
Sample
0x000b000000012326-58.exe
Resource
win7-20221111-en
General
-
Target
0x000b000000012326-58.dat
-
Size
45KB
-
MD5
2f436433313468b315a98d4e7e75e8db
-
SHA1
f87adb8bf0d9a23ce2181ab91ba08357c042ae91
-
SHA256
a83f899ac4ef813e0930375678a00e0cfdf45b410b79771ce828fe1314a3e2a3
-
SHA512
7da062ec464490181d31d9e969c6873589bd39e3e71cd2739e424a1bf156842c2bc8d1236ffeeba927deaa8eee4f0b28e84e024d3340820b7ab8d466ed9d9cb0
-
SSDEEP
768:YuwCfTg46YbWUn8jjmo2qrMmaPYm3API7zjbmgX3i4RhySggkRqVjZk4yUSfBDZc:YuwCfTgp/2Tff3l73b5XS4HyskRq5ZpF
Malware Config
Extracted
asyncrat
0.5.7B
Default
185.246.220.208:6606
185.246.220.208:7707
185.246.220.208:8808
AsyncMutex_6SI8OkPnk
-
delay
3
-
install
false
-
install_folder
%AppData%
Files
-
0x000b000000012326-58.dat.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ