General
-
Target
Infected.exe
-
Size
63KB
-
MD5
b87bb81fd029f9275e9a5454307ca264
-
SHA1
69386f8208c805c0ea90f6838c1e5e5206c36c92
-
SHA256
b77c5df40772318dec4e24c7737d3d139474996223442ec15d62e05f28122db5
-
SHA512
26e09f2b382f86f4e1c9254725934f3c8e8b32eb84aaa41029f061a9e9156bc636c5a93c1e5a61a732eeb73b11c9eeecacb92af8dccab87a63a217f3fa8af3ae
-
SSDEEP
768:Cm0vnfEXf78awC8A+XU2azcBRL5JTk1+T4KSBGHmDbD/ph0oX2a90BSusdpqKYhg:qEXiLdSJYUbdh92a9XusdpqKmY7
Malware Config
Extracted
asyncrat
Default
rest-redhead.gl.at.ply.gg:36797
-
delay
1
-
install
false
-
install_folder
%AppData%
Signatures
Files
-
Infected.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ