Troianos RAT[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Troianos RAT.exe
Size

2.1MB
MD5

511019685824a62df9b827c49b995a08
SHA1

c8f6c5d4d24fc864da142c4b6ce627d29fd25cfb
SHA256

20bbc5b92a85641e32e7379d44620f7972bc4389ad0f6975734e2bc29df7110e
SHA512

b3343f2fbac6bc9ee026cc8bf472b6c8df40230a8ae15531bafe6bd3099fd34a668a5ef20ae29b4e6611764acc938e0055657004424d71b1b5fb33cd11f169e9
SSDEEP

24576:8U5cP2/1vdrzACYMsY09snkhFfuuQtXQxLd5Eyf2HWRj6SyadrhjFK8vEH:KMFrT8IklW5j0drTxE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Troianos RAT.exe

Files

Troianos RAT.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ