S500RAT[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

S500RAT.exe
Size

12.7MB
MD5

410d1480ffd78448c643562c14ea989a
SHA1

0f4134ad08223eb416efa2673e88c282bb5374f8
SHA256

93b40bfbb68da4bd7e39fc8618358d60b4c91ab30f0329309aac53c8f9d27257
SHA512

19c426fe9e46cb4aec1231662068f0d3e26851d61865ddb1f2e9c0359a8b781510729570bd3aafa54807d5690f3336bda144c4c4bfc209d13307e4793f7f5f9d
SSDEEP

196608:sxjg7DGOfJvSW5Ik9e2XkuujHWRcQRO7F0p/GChj171pZqeYAtmk3Bkzzj:+jguO1SW5IxA+BQQGprjbvqeYZwBI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
S500RAT.exe

Files

S500RAT.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12.6MB - Virtual size: 12.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ