Overview
overview
10Static
static
10COMPILED.zip
windows7-x64
1COMPILED.zip
windows10-2004-x64
1AsyncRAT/AsyncRAT.exe
windows7-x64
1AsyncRAT/AsyncRAT.exe
windows10-2004-x64
1AsyncRAT/A...xe.xml
windows7-x64
1AsyncRAT/A...xe.xml
windows10-2004-x64
1AsyncRAT/P...at.dll
windows7-x64
1AsyncRAT/P...at.dll
windows10-2004-x64
1AsyncRAT/P...ra.dll
windows7-x64
1AsyncRAT/P...ra.dll
windows10-2004-x64
1AsyncRAT/P...er.dll
windows7-x64
1AsyncRAT/P...er.dll
windows10-2004-x64
1AsyncRAT/P...er.dll
windows7-x64
1AsyncRAT/P...er.dll
windows10-2004-x64
1AsyncRAT/P...er.dll
windows7-x64
1AsyncRAT/P...er.dll
windows10-2004-x64
1AsyncRAT/P...us.dll
windows7-x64
1AsyncRAT/P...us.dll
windows10-2004-x64
1AsyncRAT/P...ns.dll
windows7-x64
1AsyncRAT/P...ns.dll
windows10-2004-x64
1AsyncRAT/P...er.dll
windows7-x64
1AsyncRAT/P...er.dll
windows10-2004-x64
1AsyncRAT/P...ry.dll
windows7-x64
1AsyncRAT/P...ry.dll
windows10-2004-x64
1AsyncRAT/P...ra.dll
windows7-x64
1AsyncRAT/P...ra.dll
windows10-2004-x64
1AsyncRAT/P...op.dll
windows7-x64
1AsyncRAT/P...op.dll
windows10-2004-x64
AsyncRAT/P...le.dll
windows7-x64
1AsyncRAT/P...le.dll
windows10-2004-x64
1AsyncRAT/P...ry.dll
windows7-x64
1AsyncRAT/P...ry.dll
windows10-2004-x64
1Behavioral task
behavioral1
Sample
COMPILED.zip
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
COMPILED.zip
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
AsyncRAT/AsyncRAT.exe
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
AsyncRAT/AsyncRAT.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
AsyncRAT/AsyncRAT.exe.xml
Resource
win7-20240220-en
Behavioral task
behavioral6
Sample
AsyncRAT/AsyncRAT.exe.xml
Resource
win10v2004-20240412-en
Behavioral task
behavioral7
Sample
AsyncRAT/Plugins/Chat.dll
Resource
win7-20240215-en
Behavioral task
behavioral8
Sample
AsyncRAT/Plugins/Chat.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral9
Sample
AsyncRAT/Plugins/Extra.dll
Resource
win7-20240215-en
Behavioral task
behavioral10
Sample
AsyncRAT/Plugins/Extra.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
AsyncRAT/Plugins/FileManager.dll
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
AsyncRAT/Plugins/FileManager.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral13
Sample
AsyncRAT/Plugins/FileSearcher.dll
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
AsyncRAT/Plugins/FileSearcher.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral15
Sample
AsyncRAT/Plugins/LimeLogger.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
AsyncRAT/Plugins/LimeLogger.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral17
Sample
AsyncRAT/Plugins/Miscellaneous.dll
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
AsyncRAT/Plugins/Miscellaneous.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral19
Sample
AsyncRAT/Plugins/Options.dll
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
AsyncRAT/Plugins/Options.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral21
Sample
AsyncRAT/Plugins/ProcessManager.dll
Resource
win7-20240215-en
Behavioral task
behavioral22
Sample
AsyncRAT/Plugins/ProcessManager.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral23
Sample
AsyncRAT/Plugins/Recovery.dll
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
AsyncRAT/Plugins/Recovery.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
AsyncRAT/Plugins/RemoteCamera.dll
Resource
win7-20231129-en
Behavioral task
behavioral26
Sample
AsyncRAT/Plugins/RemoteCamera.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral27
Sample
AsyncRAT/Plugins/RemoteDesktop.dll
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
AsyncRAT/Plugins/RemoteDesktop.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral29
Sample
AsyncRAT/Plugins/SendFile.dll
Resource
win7-20240220-en
Behavioral task
behavioral30
Sample
AsyncRAT/Plugins/SendFile.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral31
Sample
AsyncRAT/Plugins/SendMemory.dll
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
AsyncRAT/Plugins/SendMemory.dll
Resource
win10v2004-20240226-en
General
-
Target
COMPILED.zip
-
Size
6.9MB
-
MD5
30b1961a9b56972841a3806e716531d7
-
SHA1
63c6880d936a60fefc43a51715036c93265a4ae5
-
SHA256
0b29711ec115c27f4cd6963b9ea1e4febf15624f1c17d1c018611ee3df8c333c
-
SHA512
9449065743226bd15699e710b2bab2a5bb44866f2d9a8bd1b3529b7c53d68e5ecba935e36406d1b69e1fb050f50e3321ef91bc61faac9790f6209fec6f930ed0
-
SSDEEP
196608:C+MPQJu8YfQFtMAFMQ5RIhFmQ06L29tJW0SCK5u:C+mQ08YfQNMQ5RI7i9LSCAu
Malware Config
Signatures
-
Async RAT payload 1 IoCs
Processes:
resource yara_rule static1/unpack001/AsyncRAT/Stub/Stub.exe family_asyncrat -
Asyncrat family
-
Detect ZGRat V1 13 IoCs
Processes:
resource yara_rule static1/unpack001/AsyncRAT/Plugins/Chat.dll family_zgrat_v1 static1/unpack001/AsyncRAT/Plugins/Extra.dll family_zgrat_v1 static1/unpack001/AsyncRAT/Plugins/FileManager.dll family_zgrat_v1 static1/unpack001/AsyncRAT/Plugins/FileSearcher.dll family_zgrat_v1 static1/unpack001/AsyncRAT/Plugins/LimeLogger.dll family_zgrat_v1 static1/unpack001/AsyncRAT/Plugins/Miscellaneous.dll family_zgrat_v1 static1/unpack001/AsyncRAT/Plugins/Options.dll family_zgrat_v1 static1/unpack001/AsyncRAT/Plugins/ProcessManager.dll family_zgrat_v1 static1/unpack001/AsyncRAT/Plugins/Recovery.dll family_zgrat_v1 static1/unpack001/AsyncRAT/Plugins/RemoteCamera.dll family_zgrat_v1 static1/unpack001/AsyncRAT/Plugins/RemoteDesktop.dll family_zgrat_v1 static1/unpack001/AsyncRAT/Plugins/SendFile.dll family_zgrat_v1 static1/unpack001/AsyncRAT/Plugins/SendMemory.dll family_zgrat_v1 -
Zgrat family
-
Unsigned PE 15 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/AsyncRAT/AsyncRAT.exe unpack001/AsyncRAT/Plugins/Chat.dll unpack001/AsyncRAT/Plugins/Extra.dll unpack001/AsyncRAT/Plugins/FileManager.dll unpack001/AsyncRAT/Plugins/FileSearcher.dll unpack001/AsyncRAT/Plugins/LimeLogger.dll unpack001/AsyncRAT/Plugins/Miscellaneous.dll unpack001/AsyncRAT/Plugins/Options.dll unpack001/AsyncRAT/Plugins/ProcessManager.dll unpack001/AsyncRAT/Plugins/Recovery.dll unpack001/AsyncRAT/Plugins/RemoteCamera.dll unpack001/AsyncRAT/Plugins/RemoteDesktop.dll unpack001/AsyncRAT/Plugins/SendFile.dll unpack001/AsyncRAT/Plugins/SendMemory.dll unpack001/AsyncRAT/Stub/Stub.exe
Files
-
COMPILED.zip.zip
-
AsyncRAT/AsyncRAT.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6.4MB - Virtual size: 6.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
AsyncRAT/AsyncRAT.exe.config.xml
-
AsyncRAT/Plugins/Chat.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 365KB - Virtual size: 365KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 804B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
AsyncRAT/Plugins/Extra.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 373KB - Virtual size: 373KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 804B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
AsyncRAT/Plugins/FileManager.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 390KB - Virtual size: 390KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 684B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
AsyncRAT/Plugins/FileSearcher.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 431KB - Virtual size: 430KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 836B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
AsyncRAT/Plugins/LimeLogger.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 366KB - Virtual size: 366KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 828B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
AsyncRAT/Plugins/Miscellaneous.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 558KB - Virtual size: 558KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 692B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
AsyncRAT/Plugins/Options.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 376KB - Virtual size: 375KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 812B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
AsyncRAT/Plugins/ProcessManager.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 359KB - Virtual size: 359KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 844B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
AsyncRAT/Plugins/Recovery.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 598KB - Virtual size: 597KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 820B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
AsyncRAT/Plugins/RemoteCamera.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 450KB - Virtual size: 449KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 836B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
AsyncRAT/Plugins/RemoteDesktop.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 388KB - Virtual size: 387KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 836B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
AsyncRAT/Plugins/SendFile.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 366KB - Virtual size: 365KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 820B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
AsyncRAT/Plugins/SendMemory.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 365KB - Virtual size: 364KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 828B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
AsyncRAT/Stub/Stub.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ