General
-
Target
Dllhost.exe
-
Size
47KB
-
MD5
e15052ab153401b16594f794a424d048
-
SHA1
31cab904e1f3bce48ce9bac3d794771943e50588
-
SHA256
e32914230692a86ded5fb3da76281331b1453e44b731ad92ed5c49b5ca723946
-
SHA512
12d89b33423167b5ad6aef5a1feae65b3d47abb2999a6bf3bb503b96f74b58db9adb2855cc161d58cb068851e69ff030c47327968be69ab68126ec9c13d377aa
-
SSDEEP
768:8uQSNTvEEaBrWUXFd5mo2qmi8xwdH9NXSPI2CDcGT40b2j1UvGzHx9mvBDZkx:8uQSNT8572xpKHDD1vb2YGzLmZdkx
Malware Config
Extracted
asyncrat
0.5.8
Default
carolina-reverse.gl.at.ply.gg:34609
DL8q7udp2Hxw
-
delay
3
-
install
true
-
install_file
SolaraHoster.exe
-
install_folder
%AppData%
Signatures
Files
-
Dllhost.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ