vanillarat | basic[.]exe

General

Target
basic.exe
Size 115KB
Sample230722-mak31aae99
SHA256 af257f0e835be7e2d87d1e58a8f4ee22abad6684dbac081795f57276712696f3
MD5 40a686daef5032b86eadeb9e017e01c4
SHA1 3a91374cab9977190baa9b94ea4d433f47257ba4
SHA512 12b12c85fbee63bcc3c65bc11d5e7949eb12c0060f7b1545a2fe6b130471a9adf355d043de81ccd80c6039e2e0341895a3037171c6f3633376f789fbbb6718d6
SSDEEP 3072:SJZKnPE2YyJzELtyTFyYeY8lNgoiJ+sX8HFvytboN:SJZKBI0FyYeY4eoiJ+sCFvP
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

rat vanillarat

Malware Config

Signatures

Vanilla Rat payload 1 IoCs

rat

resource	yara_rule
sample	vanillarat

Vanillarat family
vanillarat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
basic.exe

File Explorer

basic.exe

.exe 115KB

basic.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 af257f0e835be7e2d87d1e58a8f4ee22abad6684dbac081795f57276712696f3
MD5 40a686daef5032b86eadeb9e017e01c4
SHA1 3a91374cab9977190baa9b94ea4d433f47257ba4
SHA512 12b12c85fbee63bcc3c65bc11d5e7949eb12c0060f7b1545a2fe6b130471a9adf355d043de81ccd80c6039e2e0341895a3037171c6f3633376f789fbbb6718d6
SSDEEP 3072:SJZKnPE2YyJzELtyTFyYeY8lNgoiJ+sX8HFvytboN:SJZKBI0FyYeY4eoiJ+sCFvP
MD5 SHA1 SHA512 SSDEEP

windows x86

Vanilla Rat payload

rat
Unsigned PE

Checks for missing Authenticode signature.

Password

f

Minor OS version

Major OS version

Entry point

122414

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

basic.exe

mscoree