Revenge-Rat Builder[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Revenge-Rat Builder.exe
Size

751KB
MD5

ec69a5f751fffd5b76d90ed96d4f822f
SHA1

472f9e0b096becff3ec534ca109de91f986ee705
SHA256

4fee816f367df662e9842fff6deb2206aebabd9c41060ebcafef7f7acbb21a18
SHA512

3d15dafc849b8aaaa7547bff43f2d74dd7e45f377ef25d81667153686915fdb852aee7172fd4d36b2afaf17b8f2a1431f88bcfee95bcf46bb947df763c4e6b37
SSDEEP

6144:9u7c7YdbMKsPcomyThwq1+wvpu7c7YdbMKsPcomyThwq1+w:9u7XdbM50omyhVhu7XdbM50omyhV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Revenge-Rat Builder.exe

Files

Revenge-Rat Builder.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\computer\Desktop\Rvenge-Rat Builder\WindowsApplication109\WindowsApplication109\obj\Debug\Revenge-Rat Builder.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 386KB - Virtual size: 385KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ