General

  • Target

    DCRatBuild.exe

  • Size

    1.1MB

  • MD5

    009e74c19ae15ed607f4f5765f871a4f

  • SHA1

    1480e0767d469f1b0067ef5282476ce60034733c

  • SHA256

    0a0fe4d8b3a34d18edaaf0dffbeec8bfdee185e3c8858607aed8cef899cb8b98

  • SHA512

    1ac08c5d70eca7ef76b83e12c58022cf395d04a83fdf6301a627039081dca2cbb21d0a9a9a5e580130633eb798043ea614951547fdfeb1c632224c14ed383137

  • SSDEEP

    12288:aRZ+IoG/n9IQxW3OBsee2X+t4RbQeok/QDjI69f0mgqw87Yn37EGv4NzzU4B4sH:U2G/nvxW3Ww0tT/QDjIUgqw87ZzzU8rH

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • DCRatBuild.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections