General

  • Target

    2oK.exe

  • Size

    783KB

  • MD5

    339b3e40ca01edc96db902e4ac24c306

  • SHA1

    c1bb78e5fe136ad91ca1df360e3368c3a1690543

  • SHA256

    2774262a54ea6008d5b508f4d95eb811bd5d7dc50e1c0659d016ab33d966e729

  • SHA512

    09a26e84ac80e931afbee8d6e79c85250775ca147d9cff51ad5c321bfc10b5feecf3292e7c35de85ea379fd36b8fcb4e530ff3342adb48c1bc9509a84a4a0c6a

  • SSDEEP

    12288:GqnOYxdAgpoNeF91rg5iFdr0yQ9gYx+EIpakCYJRU7Q9bWoFzqK:G+OQbpbgsFdAyQvzSqaq8q

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2oK.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections