Aice-Rat[.]exe | Triage

Sharing

General

Target

Aice-Rat.exe
Size

239KB
MD5

cde2fe84685ce75c78165282948ce455
SHA1

fd95c9f63da3545a113981b62981d10bec2e6681
SHA256

43efa001ef37d9cbd6165e377df0d4197109af829410302654d339a837030696
SHA512

fc0e4e15f98944c4505507da302e316ffedf8943eb3ebcaa50f649abe8ca711503fac81946fb5593a9c40ba17c2d2497977c5d797b0413ee5c459ccb33430e20
SSDEEP

3072:NmFvZ7kw/VSk1S6+KEHBAnpK37nXv8Gd0MtQ7AAPs774tyJTOn0K9OK8A5EN2cu3:NMv1D3k6+/8G3APOO3T5soVq5e8J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Aice-Rat.exe

Files

Aice-Rat.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 237KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ