General
-
Target
38ae20291a0b0671e02910c15df5cebeb5f6d9e8bd3da0f9d438a1c9a6a5cde0
-
Size
1.2MB
-
MD5
d90f6fd36e153041dc3b14d19aac2736
-
SHA1
da47021a235225d91639c03f1ae4b4881c585929
-
SHA256
38ae20291a0b0671e02910c15df5cebeb5f6d9e8bd3da0f9d438a1c9a6a5cde0
-
SHA512
30bd9eac929769deb070fa36679aebc331e0662efc428fad7cdd6dff52d5dce1fc91cce61e8babbcab2b7d7f142b6376c376d5a78527b531a147fee06f4f7f58
-
SSDEEP
24576:NR28aergLxCcjZGKCKFuTBHNWdd2HAxWnUDTJ/yS3Rh:TJaDKf4p4UD1v
Score
10/10
Malware Config
Signatures
-
DCRat payload 1 IoCs
Detects payload of DCRat, commonly dropped by NSIS installers.
-
Dcrat family
-
Detects executables containing bas64 encoded gzip files 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
38ae20291a0b0671e02910c15df5cebeb5f6d9e8bd3da0f9d438a1c9a6a5cde0
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections