Behavioral task
behavioral1
Sample
AsyncClient1.exe
Resource
win7-20231020-en
General
-
Target
AsyncClient1.exe
-
Size
63KB
-
MD5
411ded46a3474e29bc8ab07b70b09031
-
SHA1
9c419e8baf0b33389da89581d9c7d3267f6e19e2
-
SHA256
fc825d4b1e0b41d022066247620735de2b393fad54568c481b3966f1c67f1bae
-
SHA512
d94d279fc875147603497d417799fac071dc36aaaeb73d2c91eecc15620a8c98b16eb6812109f220920c56046038e353068ccbedd02390efccaa8824f398bdbb
-
SSDEEP
1536:v2wukvF1ak9gcKu5UYF6up5boAPJi1iv5rPlTGhx:v2dkvF1ak9Ku5UYFl5boEi1Q5dax
Malware Config
Extracted
asyncrat
| Edit 3LOSH RAT
Default
aaarr43.duckdns.org:9330
AsyncMutex_6SI8OkPnk
-
delay
3
-
install
false
-
install_folder
%AppData%
Signatures
Files
-
AsyncClient1.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ