General

  • Target

    celex_v2 - Copy.exe

  • Size

    2.6MB

  • MD5

    ae3512d7f733758e3b279abc3ad61e18

  • SHA1

    e6e07d976c3fa80a9d6662da3337e9ca4fce1100

  • SHA256

    55204a89758021ba1032fb64d0fd609ab01226f8612b18f7fa01a1575e6f5d4e

  • SHA512

    266dbc4bcd7d21c3c86c12ae12e741370f2b4214bad2d17c24fccc40b2b04c194d45ecdfbb305be672f9e5372be5a6bb16f986da6e96ee3aa8256b95f877b380

  • SSDEEP

    49152:FbA3lJzdoP84ZmAj7AP8r2UXVnzu4HLFiNHEE0I8Uy9+itOPF:FbpU4ZWkr2UFzdy0I8Uy8dF

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • celex_v2 - Copy.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections