General
-
Target
Infected.exe
-
Size
63KB
-
MD5
2762b6c0426969ad748080350f79ba12
-
SHA1
2875a5b31efacfc0793d8ccae510c1cdb1c32c3a
-
SHA256
d9d118d8e9e576dd214bc47186b63c7048ea38fc0e35ade640cc8b7a14c7b134
-
SHA512
7599dc28da55d19492a3bd565e0224cd80860cfd4c3e5b861a6ab0bb59d425d11c2b7a5275de1cccd2f383649360f98a2f9f8a147ba63e924762f9b891c3ac6b
-
SSDEEP
768:Qv7M2nr/978dQC8A+XjlazcBRL5JTk1+T4KSBGHmDbD/ph0oXzpZeBeNSu0dpqKX:M5/V/dSJYUbdh9ke8u0dpqKmY7
Malware Config
Extracted
asyncrat
Default
a3Ζ贼p勒תΗΙRA迪wاΔq吾
-
delay
1
-
install
false
-
install_folder
%AppData%
-
pastebin_config
https://pastebin.com/raw/vwZSNqdX
Signatures
Files
-
Infected.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ