Behavioral task
behavioral1
Sample
Client.exe
Resource
win7-20230220-en
General
-
Target
Client.exe
-
Size
47KB
-
MD5
ba749e000163c81a53234fcb21cdd2ee
-
SHA1
1650d6019a972f647ad8b58bab7648bd9311cc02
-
SHA256
f510b0b4cc33d862c3b1d9b35ee76563cf3044e5d85009d27a46177ab4332b7d
-
SHA512
91bb51faf1a3ba3ed3e2ee963642da71df3c9c4ffd4502142407fac1cc99f29fa33b0c73abf50f3e1f095252efbfc9fde6a35fece6002349f25c28837583f5d7
-
SSDEEP
768:gbERqILEWgg+jiltelDSN+iV08Ybyge3Tg/Rvu9vEgK/JrZVc6KN:cEgIltKDs4zb1AwJu9nkJrZVclN
Malware Config
Extracted
asyncrat
1.0.7
Default
127.0.0.1:8848
DcRatMutex_qwqdanchun
-
delay
2
-
install
true
-
install_file
app.exe
-
install_folder
%Temp%
Signatures
Files
-
Client.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ