General

  • Target

    DCRatBuild1234.exe

  • Size

    3.1MB

  • MD5

    f3df893f3e88e2a7a3259c18d5cc4905

  • SHA1

    8efa74e29bd0d8f9de8a4227ddbed6a24bfe589f

  • SHA256

    5d94db1580406b2692da43b44fd1cc577e8384357ccae0b79b78269ec1551fc1

  • SHA512

    4bb2be1bd61ffabe277ee32d445c5fad13e3f2071f99da4326e4e98346be3f6b9e7cfd8f39c05d6994025678039155ad461e9e0809da4842bdcb0a0b3230d4ff

  • SSDEEP

    49152:UbA307jJqMzdkMUxkBB8i1uVNeGP3BgOeFLEZzOFTvde4wKeKBXUEgLNGM1N1vuj:UbjHzustUDPxgOcEZzOFT5wdKx+Rvuys

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • DCRatBuild1234.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections