Behavioral task
behavioral1
Sample
Shiba Gold cracked.exe
Resource
win11-20240221-en
General
-
Target
Shiba Gold cracked.exe
-
Size
63KB
-
MD5
d26096bfa7a572735428a81777b98c68
-
SHA1
ee2285b122ba6e0f33eabc0b3f737a46afbbce21
-
SHA256
85e36fc4d5197ba67542c9391d33a3768f1c772d023a774b833b88ff5f07e8d5
-
SHA512
92e13b52a33b046faa80bd425d046e49e0ce842694e5407c8e9aee6d8ddb2bf68ec0c901bd5e9d7d31481bbb51ccefdb89f7861ccf7dc795896a323085e299ab
-
SSDEEP
1536:YZeNjfU/cNRPZNg/pl1R4yIcbbMwOQ3eRGiDpqKmY7:YZeNjfU/clCpqHcbbMBgz
Malware Config
Extracted
asyncrat
5.0.5
Venom Clients
192.168.1.26:4449
Venom_RAT_HVNC_Mutex_Venom RAT_HVNC
-
delay
1
-
install
true
-
install_file
Win-setup.exe
-
install_folder
%AppData%
Signatures
Files
-
Shiba Gold cracked.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ