General
-
Target
download2.dat
-
Size
65KB
-
MD5
4e6c843f0d14cb2344a753d5078a7c06
-
SHA1
71be0cfcead378b7e3dfc911f30c4c75bf6e84aa
-
SHA256
e2da5e88c31d83b15515f5fd0c2558991c882937cd8f95ee6be834b283090e8d
-
SHA512
52f6a78960f006ae83872cc615b019a20431c417c7fa86f5503b97b083b9103dff63a0d4917ed3611c6bd0e480846cb7c349d9e72e5fb3d62d8a772228a4712c
-
SSDEEP
1536:L20SlH9kGYrsVqfhuD2a/d97IURE8vU6aL3KiELJqXuzc1b3eYHv4yV6B0y8rFTa:L20SlH9kSE8vU6aLHELJKuY1buYHvFFa
Malware Config
Extracted
asyncrat
| Edit 3LOSH RAT
BesO-OsA
osostata.com:9999
AsyncMutex_alosh
-
delay
3
-
install
false
-
install_folder
%AppData%
Signatures
Files
-
download2.dat.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ