C:\Users\1\Desktop\payload\obj\Debug\payload.pdb
General
-
Target
DcRat.exe
-
Size
1.7MB
-
MD5
2654ed21f41ddf23c0bcad4b7fe550e1
-
SHA1
55191e232ee3851a66f264cc3f163a5a14c84843
-
SHA256
149525b397dd4f1bb68edd6eb750b0cd400a36a265766b6eab14daff8d446da0
-
SHA512
748d64575954c442b1a261a8b647b4dd9af93b42382bb227972c977818ed155bc93a8afc1e7e7edcf62da32877581fb9a42b87521bc849be45a27711639a0c2d
-
SSDEEP
24576:w2G/nvxW3WieChFP0UI2K/L7OXxfeacboEkAGpkXqde7u0GUzzGQYpXTcviXSzDI:wbA3jYUI2JX68Ncu0fnS5yiXSzD
Malware Config
Signatures
Files
-
DcRat.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ