General

  • Target

    Update4.exe

  • Size

    4.0MB

  • MD5

    bc594cced3b43cee54be7657b2e84a75

  • SHA1

    499b041b5c84c19ff6e9ec3c1e2d4c4bd7b447f2

  • SHA256

    ea970002e257129f820da1b45a67d4a98ad80869ab69e65ee759835938fc2e1c

  • SHA512

    55db61dbf2e87ab4d9d9a58c9aab3a0ab03105e9a260ebc73a44ebd3fe4d76cb8cd4e5e83f8990782ab273d1679a04919c707aba45cd2322a26bbb43e1effc36

  • SSDEEP

    98304:ubhKIhaLweBRa1BWhGjyVm0gPAuvezD2zS2M5LrD9TkfjVWtbv:u1/hafK/uZgPNGWW2M5LrD9OjVWv

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Update4.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections