Behavioral task
behavioral1
Sample
0a3b6a28d54fa43667875cd293f3389e.exe
Resource
win7-20231129-en
General
-
Target
0a3b6a28d54fa43667875cd293f3389e
-
Size
479KB
-
MD5
0a3b6a28d54fa43667875cd293f3389e
-
SHA1
c34adb4087e1d43b96467a98b99e0e6a6bc08412
-
SHA256
3575e6b60c2dc3cbdf010ef13e26e7650206ed8c3c043d9745aba0d6f4f5b7c0
-
SHA512
f26afaf25f8d7ecd95cab925df4ed128bf65389366a1d19a2d426089e5d521a8caf32069c47197143cd8b2ff18bb255d777d0b72d22338f1695b35b9eb66cf32
-
SSDEEP
6144:p371bnnzxu3BjcZM/FFD9ah8FEqfoCilw6e/wkPBPncb4mzOov/QjHX:vxuWZ0y8BolNejPn+J3Qj3
Malware Config
Extracted
asyncrat
0.1.6A
micro
127.0.0.1:6606
127.0.0.1:7707
127.0.0.1:8808
127.0.0.1:65500
192.168.8.139:6606
192.168.8.139:7707
192.168.8.139:8808
192.168.8.139:65500
01235
-
delay
4
-
install
false
-
install_folder
%AppData%
Signatures
Files
-
0a3b6a28d54fa43667875cd293f3389e.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 415KB - Virtual size: 414KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ