Behavioral task
behavioral1
Sample
I'm not a RAT, trust me..exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
I'm not a RAT, trust me..exe
Resource
win10v2004-20231215-en
General
-
Target
3c97b85212f240a63eff60476d514e69
-
Size
334KB
-
MD5
3c97b85212f240a63eff60476d514e69
-
SHA1
b4d5ca05ebdaed00d5082a8441ee0bc14f44baf8
-
SHA256
20c31fe5b14b0fd8b848c358894bb361d43dd79692f76679d4457178ffc47bd5
-
SHA512
04f2ec68006736674bfb824fdb2e32fd414b6344341c7dca4f6c655326e5ad9df5b50ef9951d87637be742351f976acd38072f912528e1e96b6ecdb46dcc3700
-
SSDEEP
6144:7fNRnBF4/1rTi2dCQbYFrXSXxL4Amx/o4t+5jKZAOQrJ7GVj03ua02fEx:7fNRnw/1ru2sQkBCBL4hx/m8QrJ7G5U6
Malware Config
Signatures
-
resource yara_rule static1/unpack001/I'm not a RAT, trust me..exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/I'm not a RAT, trust me..exe
Files
-
3c97b85212f240a63eff60476d514e69.cab
-
BIGGERASSSHOT.jpg.jpg
-
I'm not a RAT, trust me..exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 228KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 106KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE