Back Connect[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Back Connect.exe
Size

4.6MB
MD5

ad623188d16c872ea933f97869cb47db
SHA1

584c3a5ef8f9b1aefdf1b69ba625c63a51c5ca6a
SHA256

7936b47a27c7e2b5f41d8179581d712703ee286faefc2b4efa33bd6fa0a9aab1
SHA512

7db84f66b8dc17a038c959aca8261f9b5b4d1b51f5c58e1256afca5dd61b2dcdb9f11948af8a59d17094a7972905df9f21723b8c9e2b50ec0d005592daf071ff
SSDEEP

98304:bGZZezAfFXqRIn5Y1PffTZcoCI1ce1111Z511Q42nDaIEnfdDZZezLs1Snq4Zvez:qZCAfFaRIn5ufZCLJRZI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Back Connect.exe

Files

Back Connect.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\حرام عليك\dddd\New folder\Back ConNnect source\back connect\OpenSource RAT\obj\Debug\Back Connect.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 324KB - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ