SpyroidRat V6[.]1[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SpyroidRat V6.1.exe
Size

78.3MB
MD5

6e100e28a88827fdb7cc462816e5a0f7
SHA1

7428168792c74b909cc02db350a94523add3e299
SHA256

09f16b7481172a42cbb0e8c2ed27141038c340d0be245048c3f48a144ed1519b
SHA512

043eab8b931e9fce1b4db625982c7197f6a8e662ad0d3286a0c820fd2673c37183dac3ec2547792927f7b5cf298b4b8748ac1218e1ef70680fc1f8b7e1e54f1e
SSDEEP

786432:ElxV2taolHMs74R1bVDq0n/G54tHoA5AKF7zR/t6tKF+iSB+u3Azz+eKo2RQATjD:cxVc74R1b0w/G54vAMzttZmBj3kISq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SpyroidRat V6.1.exe

Files

SpyroidRat V6.1.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 78.1MB - Virtual size: 78.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ