Overview

overview

10

Static

static

10

oSWI7.exe

windows7-x64

10

oSWI7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    oSWI7.exe

  • Size

    2.1MB

  • MD5

    cf7aa78e605479dd9c2e96121c1cc49f

  • SHA1

    a3603488a0d88fc26c21ffa25a044e45da2dbcb0

  • SHA256

    94b238a6c0c1757059b32035d7f7908b93a03c95cbcfb5c410380093a4ae3e00

  • SHA512

    a496755c88b69c318c55be96dff19a2d0aea561a87ee422ba0f11f68844323982876f7421503651c88671ee96ebf76df247e887bc5e85850883601ed23e96729

  • SSDEEP

    49152:j3B3BNkmneOg9/liOjsCpfAwq1jwaCJtn:TFBNkB9NiOjsC5A91jw5

Score
10/10
ratdcrat

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

    rat
  • Dcrat family
    dcrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • oSWI7.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections