General

  • Target

    de.exe

  • Size

    1.8MB

  • MD5

    c95c64e92050393503b9ffb080c2af86

  • SHA1

    0be1f442c957e4e5fc5253be099f705b5ee80630

  • SHA256

    de8904daf0c5ec9ad4225fc8a4f9b3b66fd2de5d18b0cb3bfb94bb8b7ef7f969

  • SHA512

    716f29a25f55098806a8a0240e29ff13199ef6e173caff7ab82183e7e71830499b0d28bab1f026e3c649a33ede852108204ce7267b02a003e7a5b165f922c082

  • SSDEEP

    24576:u2G/nvxW3WieCVU5Lsj26Yfv66b/zlf1v/4/fFQB7O/4G3chNcpwiCo91qUVRddl:ubA3jVWXv3b/Zd42I4GchjiCURNTLD

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • de.exe
    .exe windows:5 windows x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections