General
-
Target
Image logger.exe
-
Size
63KB
-
MD5
a90a62e71161a809edf4efae7e212986
-
SHA1
62664d843a065315842dc12c0b2e3bfeb4d94fb7
-
SHA256
cb0192bac32dea88f3745ff0bc459247413efa76958d3cd7a1a58ea80d6440ed
-
SHA512
a78147ca442c3d044917c1ef9bf25dc61505966c8d0bd308b372070ff056f2f1fc912096caceff44c9f42240a7eb9774721b3cad39e3c0061a1e238f96f80b58
-
SSDEEP
768:i+BAGkPhz/n78FoC8A+Xkqpeyr61urX1+T4uoSBGHmDbDTph0oX7gYBBB5MSu0dP:jq/bjn0tYUbJh97gYBBBxu0dpqKmY7
Malware Config
Extracted
asyncrat
Default
127.0.0.1:3232
ש贼u4VΙץjQPfL斯vWΔ
-
delay
1
-
install
true
-
install_file
tst.exe
-
install_folder
%AppData%
Signatures
Files
-
Image logger.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ