General
-
Target
Infected.exe
-
Size
63KB
-
MD5
17c781edc8003368b31f59268d4f4640
-
SHA1
27eb8f7090c66fed6dbbc7cfc832c2eee3d1c8cd
-
SHA256
cf2820e1300517aeb7dae5e6c4cf02e02dc865694c99f6d3962ce3903326f175
-
SHA512
b6a6de775f1058fb6bb5e3115195f69874450cce2e24d6bbf307117387207e9214dbc8126499f48f24f3f8ed4a5f4ce55bbac63ec6bc3530deb45fc3c8baad97
-
SSDEEP
768:Qv7M2nr/978dQC8A+XjlazcBRL5JTk1+T4KSBGHmDbD/ph0oXHwPU8bSu0dpqKYC:M5/V/dSJYUbdh9HWU8+u0dpqKmY7
Malware Config
Extracted
asyncrat
Default
jAVΔRW吉BqZOdWר8BبmGJ7
-
delay
1
-
install
false
-
install_folder
%AppData%
-
pastebin_config
https://pastebin.com/raw/UTPHT9Xx
Signatures
Files
-
Infected.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ