dcratcript[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dcratcript.exe
Size

12.8MB
MD5

cca64d7555b71445f27992f91c82e220
SHA1

a577b99cce33a908dbdc4c260d74982a027f2c62
SHA256

64222f6c573f0a89a02d730049b65e2cc6fe7b5d044cbf19503578acaf13c017
SHA512

2d7027eddfb265a78a2545388bbdad90e613c4c3870ef0b2cf4b5366b372d6619c7a5d340e7dd56673c3929dee2658603ddef275298c7b8ef75a296a66c18330
SSDEEP

49152:2JuMg3pvXF/EXl3aXe58weWPhPDe5eJnEwwZ6X92qKZTJdvHWA2u6ZpnwPz7yAoq:ueKlOv7WPla5enEX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dcratcript.exe

Files

dcratcript.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

R5_^5d"
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 11.0MB - Virtual size: 11.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ