General

  • Target

    20ff4291f36bd9fbba6b368dd2690cd4.exe

  • Size

    829KB

  • MD5

    20ff4291f36bd9fbba6b368dd2690cd4

  • SHA1

    0ef7c0076b42e3fc115623f90039224163b04d70

  • SHA256

    ab0f07a906a076c101943b677a6325390574f4184cb1d28effd51fdb62bd6ae0

  • SHA512

    4568c45d266096ee40731f51a0bf627f4926dbab7ad0f5c0f83c95ceb74e90ce4b9d77061f86b03afe1058f18eea727921a6323760d16c2e69a1715c7ba7e748

  • SSDEEP

    12288:GAbuRJ+dCGgR89WY7sf/qRAPFebQjr1p4aySC9WuzvAAb:vb+J+AY7sKRELj/ySCoAb

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 20ff4291f36bd9fbba6b368dd2690cd4.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections