CraxsRat v7[.]4‌[.]exe | Triage

Sharing

General

Target

CraxsRat v7.4‌.exe
Size

52.9MB
MD5

b01bdd32529dc91827999dfdff59bf98
SHA1

f642eb6711dbc13a009f3db0a83a931b3f74a301
SHA256

25dadd7bd62f767a0aebcd18f3faaf22fcfeb3cff004576fe9c71d412005da0a
SHA512

5e869ba2a8f332615d666c68c6c641734cb362830972ff4d87f89a67d1fa722e2c3e2aa40f9ac95b9f2ce5f4477d4b2fa33980e77e729ba96f0ac6bcebe502ad
SSDEEP

1572864:xkSNSC0I9kSSUwkO9PEWztlGrvcjiqz+V:lN9kxZHvPGQvz+V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CraxsRat v7.4‌.exe

Files

CraxsRat v7.4‌.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 52.9MB - Virtual size: 52.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ