General
-
Target
aspnet_compiler.bin
-
Size
45KB
-
MD5
ca2ac41f0b00159d2388cb63fd9d5201
-
SHA1
1231a720bea40096b9ef7d33f81fa5d8ff90b85d
-
SHA256
e64cd2a7ce815e4bd86d1348e21dc7823404ce1e4965e3c8032f5c3aa0c59018
-
SHA512
681c6e8d0a20e8a91809827f1ca5fc98232152f1734b5af45bcbcfb7c34e9b473dd4a2800cc55e0ac28484b2d41380999491e60a40bcd8afb70b6e6879616ee0
-
SSDEEP
768:MuwCfTg46YbWUn8jjmo2qrY4M3xBfJNLPINzjb6gl3ijKTl0WdvHBDZSx:MuwCfTgp/2j4yJCN3btlSjKTCWlhdSx
Malware Config
Extracted
asyncrat
0.5.7B
Default
84.54.50.31:8877
AsyncMutex_6SI8OkPnk
-
delay
3
-
install
false
-
install_folder
%AppData%
Signatures
Files
-
aspnet_compiler.bin.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ