General
-
Target
SolarPanel.exe
-
Size
67KB
-
MD5
6fcd63f70787bf9ad29cdb316c7486eb
-
SHA1
661e1958b99330637c9e24b9beec08124facae2a
-
SHA256
60996dde7bad2beab4d0a9fdbd5fb98393bc04f53432c4464d3388bf50c1ff9e
-
SHA512
8ec008628e37266cd8d1fe157917fb72bc35ab9c277f7a849d6f8ef59baeb7d5ccbd1cd07bd912951e33a78da25a50a96b277a6a607deb1990110aaa34125dba
-
SSDEEP
1536:sXBERp0MQ0ATajykrucnYUb6M9mPluRl40u/XpqKmY7:sSCo3YUb6NlGl4ZEz
Malware Config
Extracted
asyncrat
Default
six-fleece.gl.at.ply.gg:48347
开贼C5xרtبω弗ωשxINReC
-
delay
1
-
install
true
-
install_file
WindowsTaskManagerHelper.exe
-
install_folder
%AppData%
Signatures
Files
-
SolarPanel.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ