General
-
Target
Dllhost.exe
-
Size
47KB
-
MD5
44359c5e869c44100cfe1dd316d4f0a2
-
SHA1
26f8aed6286f69c9d9884ffa1c81d931b77e94c1
-
SHA256
503a126804af61976611e4fa3f4991a2e3c6741029a6ac8aa2c5411a192f2115
-
SHA512
e3edb5700da4b86ee0ff0e5ba2aff9b2fc2b5107c449cef301c8a6117eaef68ef7b2778d20e7c03a80a44023638faf5a3f5a8536f09996bb1e88fef4ea641210
-
SSDEEP
768:kuMmi+TXEFlvWUjVSNmo2qzeXUvnzy+ueMnPI80LDXBqH500bs1vY/5Z06Kg6BD4:kuMmi+TXGk2fUu+oA80HcFbs5Y/bydcx
Malware Config
Extracted
asyncrat
0.5.8
Default
carolina-reverse.gl.at.ply.gg:34609
T2iVdWpLQAd2
-
delay
3
-
install
true
-
install_file
SolaraUpdateHoster.exe
-
install_folder
%AppData%
Signatures
Files
-
Dllhost.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ