Behavioral task
behavioral1
Sample
3cfc3cb76ccecf137e270368bd174334.exe
Resource
win7-20240508-en
General
-
Target
3cfc3cb76ccecf137e270368bd174334.bin
-
Size
63KB
-
MD5
3cfc3cb76ccecf137e270368bd174334
-
SHA1
ba01794efeda53df6310ecdd138f4568f44af809
-
SHA256
52dd82eb47d8e01e510f37e399404589c18b1b7fa78f176a9cdecafddbbd9225
-
SHA512
a5312b49a088fee80fe67eb4102642f3a17ed4e23c1e8c129e0d3c0b0a57e56a7422fe157a1faf7c4b448f54b72594d67216909c7ca0c36ee52d9ef1e55cb891
-
SSDEEP
768:CmUvnkjXf78dwC8A+XU2azcBRL5JTk1+T4KSBGHmDbD/ph0oXPwaVKzI+SNySusV:6wXzLdSJYUbdh9PbVKE+qlusdpqKmY7
Malware Config
Extracted
asyncrat
Default
127.0.0.1:3232
-
delay
1
-
install
false
-
install_folder
%AppData%
Signatures
Files
-
3cfc3cb76ccecf137e270368bd174334.bin.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ