C:\Users\notfishvr\Documents\Outher\VS\C#\Rat\Rat\obj\Debug\Rat.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Rat.exe
Resource
win10-20240221-en
General
-
Target
Rat.exe
-
Size
2.0MB
-
MD5
24388e7965145acb2d4c97c4e27ddf21
-
SHA1
f0a13915025819a3df60b0cb082339860051bf7d
-
SHA256
94f0e0f92c9fc3f92e7d306bf7b300d72983f68bec8e8b7d3c56de9945dddfe9
-
SHA512
1129c786eb8a9b5d5acfb2aa3685633ef17ccaa8e9af211944d8def09cd96d0a4d5d719dcc0147a99b6e329fe7a04d377db812fbf7c503e9866c625258ef5ead
-
SSDEEP
49152:7+UbowEOvygS7/1sHOqJ02nTPFdRPqxMaitQkqXfd+/9AYGDdv:7+Ucwti78OqJ7TPBCkqXf0F1gd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Rat.exe
Files
-
Rat.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ