General

  • Target

    ida(1).exe

  • Size

    2.6MB

  • MD5

    0a714a58825f953adb5c2a6b5174496f

  • SHA1

    1fd8a7b0fde278578e8ce17a11ec3ed804b62812

  • SHA256

    aadc7d9d5de7b7acafb0e1eb0190bbf1f58943a37bd0730c0fb3dff1adc593f5

  • SHA512

    48a3d05f8d5c5e5239bd699b41f9e78e06c9b8c6e717171d3612f6c466e1347b0159619d17d17492aa88850b92592cda4999a6cf4e2a5f5671ccf7a348c52c5d

  • SSDEEP

    49152:FbA3l2stPTbVEeQsaA6Wo908M67deqH0c2QvvVTNoBi:FbPEPT5EhZWGvh5xbvsi

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ida(1).exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections