General

  • Target

    112233.exe

  • Size

    807KB

  • MD5

    aff9e3ee939d89333ab2152b97ca2b1e

  • SHA1

    c1bdfbdb86c21eb7fa2bf44c4f63eb1149aabc1e

  • SHA256

    f04597b19822f7ba1e178240ec20c4b024bf7b889cb922d3bd38cec8539b3d05

  • SHA512

    36318529ffca0040965cfe63ca2e622e1207ed96faa809497bec37e8404d4a27f9e62ecc104b71f986171c4a99f3b0c581d9a5138b13f8b2dc8ec9e4b3e27bba

  • SSDEEP

    12288:z/NE54xRsSenAllJmIertdFR68/fBVpsAZiWH68bgBsZp+83CvQa7pBBDft4qaBi:z/NrqAllrertLPpscGVSN3CzTGw

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 112233.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections