888 Rat v1[.]2[.]4[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

888 Rat v1.2.4.exe
Size

82.9MB
MD5

2f43ecc244743defb89cdf09a183e702
SHA1

73ab51502b0da7139ca07b4fbecc4d2eb4e5e01a
SHA256

8cd6ef3b18146f66efb829bde359582d7e0cb8c3cc7aba1c42ee9c857e06d903
SHA512

f5b85c41e24f62542e655b321c0de2f624b55f48c3b2f605d5767202f8bc46c65e01679e9418c7bb93b248829c28838a7e66f7f143f29ea440be1b23acd69384
SSDEEP

1572864:oIEjFWuFIn+DSXv61Yu3dwX4Mi0E50BwJ7ql10SYxCaXa4FdushvEaz:oZ4ADSy11G4oO0FizxC4FdusZ

Score

1^/10

Malware Config

Signatures

Files

888 Rat v1.2.4.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

aHc
Size: - Virtual size: 548KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Security
Size: 283KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 125KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE