Behavioral task
behavioral1
Sample
bJvF.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bJvF.exe
Resource
win10v2004-20220812-en
General
-
Target
bJvF.exe
-
Size
45KB
-
MD5
434272e39598efb39944fe0ad41b0cb5
-
SHA1
961476c2cbd0c9b5925a502a0ef76ff9c0715177
-
SHA256
55e25bce90136a80ea0e24c17e4fa2b6582d9d387b3defeb06d40e38313ea6fe
-
SHA512
8a125929ea0784ab4519be75ded1d239faf48dd8d95729bc1ea1deb7d9b3f04e17662b8e246ea35bee341c9c775c9ef62fe349eb215b835665f8aee4fb7802a7
-
SSDEEP
768:DuYe9T3kH1jWUvmqRmo2qbtIziXqiPIlzjbCgX3iPCV/qajNcuA38BDZfx:DuYe9T34l2kQl3blXSAr2uAqdfx
Malware Config
Extracted
asyncrat
0.5.7B
New02022023
asy1543.duckdns.org:1543
AsyncMutex_6SI8OkPnk
-
delay
30
-
install
false
-
install_file
MRR.exe
-
install_folder
%AppData%
Files
-
bJvF.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ