asyncrat | PEGASUS FULL VERSION[.]exe | Triage

Sharing

General

Target

PEGASUS FULL VERSION.exe
Size

6.8MB
MD5

327ba7af9427fdb450a0628a27ae26de
SHA1

26fab46989dc26bc9b152ccb983c80ed09863ab8
SHA256

9bc6e27c34e3b2cd3fef3fe683f34246c2e6049b4e7c0a046f2babf3a7412bba
SHA512

a13f3095f643428a4713a7c6c5792c8c83c0ac2c02600761b9479caf2fe3def763248be32c3da7ea76ad07463165fda0e4f8baaa33ea24930eac59a1c62ba7bf
SSDEEP

49152:fRjkwtZPgeWCKxgt/HPEp7osQ3ANHAwnZN0lDuABhTf90fNfRPZxrJJlA26TKF8P:Bkw8A

Score

10^/10

asyncrat

Malware Config

Signatures

Asyncrat family
asyncrat
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

PEGASUS FULL VERSION.exe

Files

PEGASUS FULL VERSION.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\пк\Desktop\pegasus\Pegasus HVNC\PegasusHVNC-main\obj\Debug\net461\PEGASUS FULL VERSION.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6.7MB - Virtual size: 6.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ