CraxsRat_c[.]exe | Triage

Resubmissions

11-06-2024 03:52

240611-ee6aqstbkb 3

11-06-2024 03:49

240611-edh4tatfnj 3

11-06-2024 03:43

240611-d99qzatemn 5

Sharing

General

Target

CraxsRat_c.exe
Size

63.7MB
MD5

43a7869141f8d0c27ff9a4b4b242aa3c
SHA1

9032dfe6bf31e646383db300183f02fccb28c7d5
SHA256

80b0e2088ef10b54fc32db663a53be2211b4ed47cbb025a0fa8bce365e99ad64
SHA512

a02ed385f59f9aa8192050c27fdd18be3682f0477ef9ba5bf46317d17be48ba072a81d850fc14eb99f33250a0c45c2d1ec4a8f8f0a8bdf3bac89ba6c4da3f438
SSDEEP

786432:kk+NX10EPRCGZeZLHoA5AKF7zR/t6tKF+iSFgAxTKo2:X+NX10q8GZeZBAMzttZmFXtI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CraxsRat_c.exe

Files

CraxsRat_c.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Administrator\Downloads\Telegram Desktop\Craxsrat v7.4\7.4\CraxsRat_c.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 63.7MB - Virtual size: 63.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ