Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20230220-en
General
-
Target
setup.exe
-
Size
696KB
-
MD5
06dff227eb1af54bfb0c50fc2affff9b
-
SHA1
b6e7415383e058088e4e569480154f019c5e7f62
-
SHA256
4473deda804fd3e81f339e24a0cae78595940139eb776fec8f002a1874b04d30
-
SHA512
5e2b78a89d4dab15b61c45b466d71dd33dcf3ee684cdc207a4b2c8ba4f170291e421c055e3eba5fdd964672785cab7352a852ec142c5e7d91b183ec96bc809ef
-
SSDEEP
12288:iOLsHy9G6DMz39G6DMzgMMHMMMyMMMZMMMVcR9bzeXOMMHMMMyMMMZMMMVcR9bzK:fQ+GLpGLMMMHMMMvMMZMMMKzbKXOMMH5
Malware Config
Extracted
asyncrat
0.5.7B
Default
45.66.248.114:8899
AsyncMutex_6SI8OkPnk
-
delay
3
-
install
false
-
install_folder
%AppData%
Signatures
Files
-
setup.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 653KB - Virtual size: 653KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ